63b9fbfbc55ef2d109fb604c85042d5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63b9fbfbc55ef2d109fb604c85042d5b_JaffaCakes118
Size

48KB
MD5

63b9fbfbc55ef2d109fb604c85042d5b
SHA1

f7de74e3866c30bcf819c75da5c23c433f82612b
SHA256

b082911a2b5812e9e7878025bb57032ef099c999f8837402376694f1933f0b61
SHA512

6b7ef2e640e4627d3becfaf01d1f33f13eede6c881bc696ff63670c7db169792d8cc8e9c0985b0fb098b64a6400f6ac3dc47e43051d82acda6959c0a76c2c234
SSDEEP

768:A7FCF/7jlGTs5voknXifMj+SXJXcyautcK7u5mwQdw6m1FVqdlSl5uYPHzoe1D7t:GE7YTu3ifCdXcyzqFmg6mHLl5uYPHzog

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63b9fbfbc55ef2d109fb604c85042d5b_JaffaCakes118

Files

63b9fbfbc55ef2d109fb604c85042d5b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f5a3cb95f44817ae142bbd833b8307c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
ExitProcess
HeapFree
GetTickCount
HeapAlloc
GetProcAddress
GetModuleFileNameA
CreateProcessA
Sleep
GetProcessHeap
LoadLibraryA
GetModuleHandleA
CloseHandle

ole32

OleCreate
CoUninitialize
OleSetContainedObject
CoCreateInstance
CoInitialize

user32

SetWindowLongA
PostMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DefWindowProcA
CreateWindowExA
GetWindowLongA
GetSystemMetrics
PeekMessageW
SetTimer
DispatchMessageW
GetMessageA

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen

shlwapi

StrStrIW

Exports

Exports

i18WIlink

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ