68cdafef9b6adad3b088a3dc8a7e2364_JaffaCakes118 | Triage

Sharing

General

Target

68cdafef9b6adad3b088a3dc8a7e2364_JaffaCakes118
Size

88KB
MD5

68cdafef9b6adad3b088a3dc8a7e2364
SHA1

d0b11d611a35ad59944affca9dd761ea42d3bd07
SHA256

609db31df89ad734d1c01ef78ba457325c9258fb6163c59d5f4d1abc11e5bf6e
SHA512

2b91841b5491c23c3d16f1798c91e53901e1fc425ee5d4409af2bc89d318c2e3627654b68b27116becfb1478cc3c6bae12349c9e4c221344e1110a6e738af6fb
SSDEEP

1536:oWGihj4ak8sCKGIiwcXso5NT8Z9CuvEe16a2ETFh84NPhG7TaqdnJ1u3kMxQSB8d:oWGcj4/d41wcnNo5j6qTFh84NZ6/ckMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68cdafef9b6adad3b088a3dc8a7e2364_JaffaCakes118

Files

68cdafef9b6adad3b088a3dc8a7e2364_JaffaCakes118
.dll windows:4 windows x86 arch:x86

535ff14c1e7f92c5aa458644ee921a94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawIcon
EnableScrollBar
EnableWindow
EndDeferWindowPos
DestroyWindow
LoadCursorFromFileA
OffsetRect
ShowCursor
DestroyCaret
CreateCursor
CloseWindow
IsCharUpperA
CharUpperA

kernel32

LocalAlloc
GetSystemTimeAsFileTime
EnterCriticalSection
lstrcpyA

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE