5f7909f856278998c8376f84db44fc4c_JaffaCakes118 | Triage

Sharing

General

Target

5f7909f856278998c8376f84db44fc4c_JaffaCakes118
Size

84KB
MD5

5f7909f856278998c8376f84db44fc4c
SHA1

65cb885a73176fa8da22a3b49302a22752bfa58d
SHA256

4c12cb9bdfe8726b94d74b5f0d189ffea69e52471a3e8386141423a62542b84a
SHA512

b7e9de528a40ad3a62b6000dea3779a82ebd6fc99dca85431a8afd6c9d7b03002ad5b0aa241990084c7b2be48cf4f8e64e65d1b5dbd9514dd84bea622fc152e2
SSDEEP

1536:Vri8m0/VN8rbfe+c5I9Bg1H+6uQfSKFToppN+x2IUR41NaTNNq:Zi85/b8ve+UIg4QfSKF8pGx2n4zahw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f7909f856278998c8376f84db44fc4c_JaffaCakes118

Files

5f7909f856278998c8376f84db44fc4c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a1007ac5d1a9055cbbbedd1d3863cca3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DestroyMenu
CreatePopupMenu
CreateIcon
CreateCursor
CloseWindow
CharToOemBuffA
CharPrevA
ChangeMenuA
BeginPaint
ActivateKeyboardLayout

kernel32

EnterCriticalSection
lstrcpynA
lstrcmpiA
lstrcatA
VirtualAlloc
SetEndOfFile
OpenFileMappingA
LoadLibraryA
GetLastError
FlushFileBuffers
FindResourceA
CompareStringA

Sections

.text
Size: 18KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ