63da3bb417aade3d841403fe346412fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63da3bb417aade3d841403fe346412fa_JaffaCakes118
Size

130KB
MD5

63da3bb417aade3d841403fe346412fa
SHA1

cad2bdc1ec91a1aca37f8532ae6aa2d5bfcbd6a3
SHA256

8164558f43b2e5fd474796cddded1aac6ba24baa958aa693f4709671f7bb34e1
SHA512

633f50bd7af61e955c0c9b8e0c5cc29dcce3c44ba7c80c3651a79e7e5d66e35aa58dffd15c1b153aa17383641c9612a35d650450cbfeaf40f9d46103854c4440
SSDEEP

3072:OCmKqWmpE5cNc5nWf2FI/hAJY2d+52A14B5ms:OD/3onWf2EybTC4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63da3bb417aade3d841403fe346412fa_JaffaCakes118

Files

63da3bb417aade3d841403fe346412fa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d454e99d52225633e081d74626daa311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadContext
GlobalAlloc
GlobalMemoryStatus
HeapAlloc
HeapCreate
WriteConsoleA
lstrcmpA
lstrcmpiA

msvcrt

strspn
_exit
free
realloc
srand
time
sscanf

user32

GetFocus
MsgWaitForMultipleObjects
SetWindowLongA
FrameRect

oleaut32

OleIconToCursor
GetErrorInfo
OleTranslateColor
RevokeActiveObject
SafeArrayAccessData

shlwapi

SHSetValueA
StrSpnA
StrRStrIA
SHDeleteKeyA

Sections

.text
Size: 63KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ