4a06aa448e11e886793980257d6e7619_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a06aa448e11e886793980257d6e7619_JaffaCakes118
Size

172KB
MD5

4a06aa448e11e886793980257d6e7619
SHA1

ba087074d0d6ac4c96bb5f4ace3f19f0db95f63d
SHA256

caae0a7f83a2f5ae7bf40d6f0b88373ef322ecf458847cd06c52cabe87520a9b
SHA512

e2e3a87ae31fd510ac934ea5098a17a5dd2f5c99a53d18db3d69642937a174469d02dd58e2bce9784ec4e2ebe4e6e686fcf8a915c9b602eb4c0228197313584b
SSDEEP

3072:vBWbCGJgiD56fdCTtt0MGtviqBU9+GaN8zhgBORF4Tdv2iQ2bU:JWRJvMfkTtctvieGhNgBSOdv2iQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a06aa448e11e886793980257d6e7619_JaffaCakes118

Files

4a06aa448e11e886793980257d6e7619_JaffaCakes118
.dll windows:4 windows x86 arch:x86

34dff34f9c5b6d7f3c9753d707280601

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetConsoleMode
GetCurrentProcessId
GetModuleHandleA
GetNumberFormatA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
HeapDestroy
HeapReAlloc
MultiByteToWideChar
ReadFile
RtlUnwind
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
lstrcatA
lstrcpynA

msvcrt

free
wcscat
__set_app_type

user32

DefWindowProcA
EndDialog
GetCapture

oleaut32

RevokeActiveObject
SafeArrayAllocDescriptor
SafeArrayAccessData
VarBstrCmp
SysReAllocString
SetErrorInfo
SafeArrayDestroy
ClearCustData
GetErrorInfo
OleIconToCursor
SafeArrayCreate

shlwapi

StrStrW
StrStrA

Exports

Exports

GetEncryptionForAdapter

Sections

.text
Size: 104KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ