71726f4bfb69ebbc3afba8de12e4af68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71726f4bfb69ebbc3afba8de12e4af68_JaffaCakes118
Size

354KB
MD5

71726f4bfb69ebbc3afba8de12e4af68
SHA1

03c8477551f31836e2889b2a2be1d8dbfa5dc9f5
SHA256

e44e8c410968a4e0958eb9d1c5229c65ff7051f96ac1d1cc44642f6bc3dde57e
SHA512

1544d727ff10c0c85fc082e12d32853000df45ca882137ef3aa492168da0180584c4dfaa9333417b1ef9df943200d293c4ea8ea1098fb6454289e0c664f3c512
SSDEEP

6144:HbYSa1RST1oSprgoWfSez+VUwvLtdnYAnHnTca0RiqL:HbYSaO1odoESFywztdYAHV0RiqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71726f4bfb69ebbc3afba8de12e4af68_JaffaCakes118

Files

71726f4bfb69ebbc3afba8de12e4af68_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9c8d6e439e5ea05043c2eff819d10a27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamRestart

ws2_32

WSAAsyncSelect

user32

GetDlgCtrlID

gdi32

ScaleViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

GetSaveFileNameA

Exports

Exports

RunDllHostCallBack
RunDllHostsallBpoC
RunDllHostsallBpoT
RunDllHostsallBpoX
RunDllHostsallBpod
RunDllHostsallBpodD
RunDllHostsallBpodcZ
RunDllHostsallBpoo
RunDllHostsallBpot

Sections

.text
Size: 342KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE