47506c8f0691b84700852dd2155ef96f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47506c8f0691b84700852dd2155ef96f_JaffaCakes118
Size

64KB
MD5

47506c8f0691b84700852dd2155ef96f
SHA1

7d779fdcf8f6f18039a0f423fbba32cd06b7ea02
SHA256

af941780a4b429c8fc9ffa354cb7c3bc26013e6f43937c3c4a0940e2be7f73b4
SHA512

c9fd9c6617b5f52ca9333bd8b43f19345f91d4ff2e5502a29e938a1d754d90f5cbe688043e6eb4300a988aae21f047d0716fdf887589b9e7eccc3908de6a7387
SSDEEP

1536:znxiC3uCE3MS53tf4HnilFvDpqGu7Npsa77S:znxF3uCEL3tfLFrMbNCwO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47506c8f0691b84700852dd2155ef96f_JaffaCakes118

Files

47506c8f0691b84700852dd2155ef96f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e383d294823b1b0c609f59520d7dbfe5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateMutexA
GetCommandLineA
GetCurrentThread
GetDateFormatA
GetLastError
GetStdHandle
GetVersion
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
LocalFree
MoveFileA
SystemTimeToFileTime
VirtualQuery
lstrcmpA

user32

wsprintfA
DispatchMessageA
GetClassLongA
GetDesktopWindow
GetKeyState
GetScrollPos
GetSysColorBrush
InvalidateRect
IsDialogMessageA
LoadIconA
MessageBoxA
ModifyMenuA
ReleaseCapture
SetActiveWindow
ShowWindow
SystemParametersInfoA
UnregisterClassA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ