43ee6ff78f508b67fc1f9e8ce3dc4ce5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43ee6ff78f508b67fc1f9e8ce3dc4ce5_JaffaCakes118
Size

191KB
MD5

43ee6ff78f508b67fc1f9e8ce3dc4ce5
SHA1

be1897f65561cfee86975c54129d3fa2b24d9525
SHA256

1cc8890badea151e21ff1c6280baa058b25d8cf041352ed9b3118f6271963f95
SHA512

d26491bc4339333453d64a717febb0bd91ad7375f53fee6a266ef9b2b26138a3912e89abee1c79cebafeeb64f99f6d98a4b75da4f24df5fea43134d1c4db621d
SSDEEP

3072:XVE4ESPd/ykBX+gT8xposndp8WD0+aGUeVA/HfHQbu15:i47dHOgT0pJdp8WD0+aGt63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ee6ff78f508b67fc1f9e8ce3dc4ce5_JaffaCakes118

Files

43ee6ff78f508b67fc1f9e8ce3dc4ce5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d021cf1af92a2367b6cd8c629891c8f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
SetThreadPriority
SetThreadAffinityMask
CloseHandle
SetThreadExecutionState
lstrcpynW
Process32FirstW
RaiseException
SetConsoleCtrlHandler
Sleep
SetErrorMode
SetupComm

user32

ValidateRgn
GetWindowRgn

advapi32

SetSecurityDescriptorControl

gdi32

SetPixelV
SetROP2
SelectPalette
GetCurrentObject
RectVisible

msvcrt

__p___mb_cur_max
_wcslwr
_osver
_ismbcsymbol

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ