47093246c10caddd3263a32b8b4b3adc_JaffaCakes118 | Triage

Sharing

General

Target

47093246c10caddd3263a32b8b4b3adc_JaffaCakes118
Size

27KB
MD5

47093246c10caddd3263a32b8b4b3adc
SHA1

b27a7a35a2abd34d5348c34072ecb4064533ed16
SHA256

456038b64af80973556ecaaff2ce1e8cebd414bc5c48a7831e5f86518c796680
SHA512

b0c1df2473c6529f24a6e9659b14c77e74968f21465fe762ea2eb16f926a90455c21aba76579f8a08358fd25e28de957e4bff05acdc08a7c31e3877f8e44416c
SSDEEP

384:/9myvbGcCLojkfpOlCQNh/edOTMQUbInFCUvkGg/eRJ4VeU46skH:VDK3LoofUXNhmKMQU8nFCmIqeeU3n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47093246c10caddd3263a32b8b4b3adc_JaffaCakes118

Files

47093246c10caddd3263a32b8b4b3adc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

90218010fbad8051919200339a757253

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndDialog
EndMenu
IsCharUpperA
LoadCursorA
LoadImageA
MessageBoxA
DrawMenuBar
OemToCharA
OemToCharBuffA
RegisterClassA
SetCursor
ShowCursor
DestroyCaret
CreateMDIWindowA
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDialogIndirectParamA
CloseWindow
CharUpperBuffA
ActivateKeyboardLayout
MessageBoxIndirectA
wsprintfA

kernel32

SleepEx
FreeResource
RtlUnwind
VirtualFree
CloseHandle
SetCurrentDirectoryA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ