63fa9fd716ae354f4fd97fbfc5f0d43f_JaffaCakes118 | Triage

Sharing

General

Target

63fa9fd716ae354f4fd97fbfc5f0d43f_JaffaCakes118
Size

257KB
MD5

63fa9fd716ae354f4fd97fbfc5f0d43f
SHA1

360fdfdc6113d461c0b7d4cf1e1a846d418d84a5
SHA256

eb68f422bd719726efc322c5b8dd957484f88e9c12af33fad0b5ad64a8f3ad4b
SHA512

3dfd63c474b6927e422581beb37c722a2959bd3be7347c1a96dfb4d06e911c5e704a54d167a3eb88890518e0c493afe27d6a48c9de025b9a1a9b466ed74e9b9b
SSDEEP

6144:bzmuNPgl8lIoM8/tNIstNFIgMc/nHMwmObeHxYBMTsLfqsHXKLEZ2KLc76N7yvgz:XlIoM8/tNIuFIgMc/nHMwm9HxYBMTsLx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63fa9fd716ae354f4fd97fbfc5f0d43f_JaffaCakes118

Files

63fa9fd716ae354f4fd97fbfc5f0d43f_JaffaCakes118
.dll windows:1 windows x86 arch:x86

e54fde7d1bcc8060e8441555f52b4862

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.data
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ