5b3950741189c5a068ce778ac503badc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b3950741189c5a068ce778ac503badc_JaffaCakes118
Size

13KB
MD5

5b3950741189c5a068ce778ac503badc
SHA1

d5bcd1d60859d7ea9e7b0c9beeb0ecfbca9b51fc
SHA256

7db73325a03f835fdef42600feb2806d450ed030948f82bb883919754a4766df
SHA512

9c1915694cb50484bda30d1796816acbae96f69018d65c9ada05b8e5f7f293718e3abfba21d6ad0f5ca8ad6f00d9fb45662d0e054389f08fb784414d35ce2c1d
SSDEEP

192:QBIDfdx7TMqBC2uNsy4xqmXATGh220RL3lKjcAgo2lxP6I1AQCpiH2q:sID77TMqBCZb4QZT9rzAgvCIONpiHv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b3950741189c5a068ce778ac503badc_JaffaCakes118

Files

5b3950741189c5a068ce778ac503badc_JaffaCakes118
.dll windows:5 windows x86 arch:x86

686c8d1a06e596c8f42639033c67ccd6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
MoveFileExA
HeapAlloc
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
WriteFile
Sleep
CreateProcessA
ReadFile
FindFirstFileA
GetLastError
FindClose
MoveFileA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetVersion
DeleteFileA
CreateThread

user32

GetWindowThreadProcessId
EnumChildWindows
GetDlgItem
GetWindowLongA
EnumWindows
CloseDesktop
GetClientRect
FindWindowExA
CreateDesktopA
GetClassNameA

Exports

Exports

_Auto@0

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ