47d89a34a87353296843b1e310bb1ba4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47d89a34a87353296843b1e310bb1ba4_JaffaCakes118
Size

84KB
MD5

47d89a34a87353296843b1e310bb1ba4
SHA1

efb25c54485f37e4eaebad95f7a05e68b4eb501b
SHA256

54d970682fb0f0633c421bce139fb3ebb73c8bfa9780739ea91f2db57877a965
SHA512

2f1b854fd32da2d5f58b38bff7e3cc76b0ec9b281799edaf92b9ccb9700226670ea992a38f8574b70abfc9859178734eece1928c5aa05dec471a4eaa29af8cc0
SSDEEP

1536:SgVWhfhTt8Ppi28+CfosLhBz5abf/XT9rMY9iWGiBcHQ9/zrzg:zVWhfhTePpi28+8oihBz5Kptcsvk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47d89a34a87353296843b1e310bb1ba4_JaffaCakes118

Files

47d89a34a87353296843b1e310bb1ba4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1bd56894143d6f8b824e36cb0bea4c20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
ReadFileEx
GetFileAttributesExA
LoadLibraryA
GetStringTypeA
GetProcAddress

ole32

CoFreeUnusedLibrariesEx
CoReleaseMarshalData
CreateBindCtx

user32

BeginPaint
ChangeDisplaySettingsA
LoadBitmapA
DestroyIcon
ScrollDC
SendDlgItemMessageW
GetUpdateRect
CharPrevA
SetDlgItemInt
IsCharAlphaNumericW
CharUpperBuffW
GetKeyNameTextW
GetWindowTextLengthW

gdi32

SetLayout
CreatePalette
SwapBuffers
DeleteDC
Pie
CreatePolygonRgn
CreateEnhMetaFileW
EnumEnhMetaFile

Exports

Exports

DesktopHelpCmds

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ