4cd0eff407099ae7566e386db1605e24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cd0eff407099ae7566e386db1605e24_JaffaCakes118
Size

243KB
MD5

4cd0eff407099ae7566e386db1605e24
SHA1

1012c6b1dd16e2b28ffdeacfe0a0e3b1f2c11df9
SHA256

7c8071b73f22d9a8b6f6ebfe0dfe410a2d6afb1ca46d145980dbba89fd965501
SHA512

6ad3c61da1072d44c24258e3d37293b81eeebe1ed5612dc44e179882dbd69b5a361cb042e956aa22fbdde1af7a8d068c523695248022b15a056f08f1ddf29cad
SSDEEP

6144:2PMxteJax9C+p+nQI3yBpgue5pI7RjavytDnFyOd8ElMa/Hb:gqeJM3wQTgue5pI9jaGDF15l3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cd0eff407099ae7566e386db1605e24_JaffaCakes118

Files

4cd0eff407099ae7566e386db1605e24_JaffaCakes118
.dll windows:4 windows x86 arch:x86

535ff14c1e7f92c5aa458644ee921a94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawIcon
EnableScrollBar
EnableWindow
EndDeferWindowPos
DestroyWindow
LoadCursorFromFileA
OffsetRect
ShowCursor
DestroyCaret
CreateCursor
CloseWindow
IsCharUpperA
CharUpperA

kernel32

LocalAlloc
GetSystemTimeAsFileTime
EnterCriticalSection
lstrcpyA

Sections

.text
Size: 127KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 114KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ