4d2cbcd1390924afab6bcca389dffc2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d2cbcd1390924afab6bcca389dffc2c_JaffaCakes118
Size

277KB
MD5

4d2cbcd1390924afab6bcca389dffc2c
SHA1

08e73ac4d331ca54b087ee3c289e322c52cca5a1
SHA256

fe6e14dbbead074cf1415f3928d32456e8bc7d1292bcab01106a99cdc2b390f0
SHA512

65a6c5a9d1ca592e20c9ee5d304ca30d427d147ac4859f44677aa08f79ef11670b1ed591cc57523d5361505b513a37fa6ddeb77e9110e33c4dc925f1141f69c1
SSDEEP

6144:cUOQIGbc+/d7A+0k6X+Y8SplfVhF9teA2NdNlkoUm7lI1Hu:cUOkLh+jXLHQTke7lIdu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d2cbcd1390924afab6bcca389dffc2c_JaffaCakes118

Files

4d2cbcd1390924afab6bcca389dffc2c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5c4c792a1d3727a28a35186eed4b289d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetUserDefaultLangID
VirtualAlloc
VirtualFree
GetCommState
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayAccessData
SysReAllocStringLen
OleLoadPictureFileEx
ClearCustData
OleLoadPictureFile

msvfw32

ICInfo

Sections

.text
Size: 169KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ