474eccbf8a9196ad88cb6fe2e8ec530b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

474eccbf8a9196ad88cb6fe2e8ec530b_JaffaCakes118
Size

131KB
MD5

474eccbf8a9196ad88cb6fe2e8ec530b
SHA1

db2fecda6588f6129d6d629dc7ac9765a417ae50
SHA256

a776d470e4f7c0433fdbfa2b9cb20d47e378807eb0607ee40e185ac6f3e43e16
SHA512

ab852531124418a1846da1cbb09c70dff48c0d1eb4b9511745746d5c42c0ee1dd4d5c7153100d34030aafd889135859939ef72ef5bd297fcbdb6fb552a3bb3bb
SSDEEP

3072:vS+YhpA3qc0HQANRGMkumnIYiY2aBlbin5jGT3g0BYUN1uR+rY:v03A6JxVkzIYZvwvwb1C+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
474eccbf8a9196ad88cb6fe2e8ec530b_JaffaCakes118

Files

474eccbf8a9196ad88cb6fe2e8ec530b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0234660f8f02c580036549c26e62af72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
GetLocaleInfoA
GetSystemTimeAsFileTime
HeapAlloc
HeapCreate
SearchPathA
SetHandleCount
SetPriorityClass
TlsFree

msvcrt

sscanf
__set_app_type
_except_handler3
_exit
exit
fprintf
wcscpy
vswprintf
__p__fmode
realloc
isdigit

user32

GetWindowRect
LoadIconA
PeekMessageA
SetWindowPos
DefWindowProcA
GetWindowLongA

oleaut32

OleLoadPicturePath
RevokeActiveObject
SafeArrayAllocData
SetErrorInfo
OleIconToCursor
SysFreeString
VarBstrCat

shlwapi

PathAppendA
PathCombineA
PathFindOnPathA
PathGetCharTypeA
SHEnumKeyExA
SHQueryInfoKeyA
SHSetValueA
StrStrA
SHDeleteEmptyKeyA

Sections

.text
Size: 65KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ