71c05ac89f9c8988585b272f354b42a8_JaffaCakes118 | Triage

Sharing

General

Target

71c05ac89f9c8988585b272f354b42a8_JaffaCakes118
Size

78KB
MD5

71c05ac89f9c8988585b272f354b42a8
SHA1

3e67c6719052af417916e78136e43c401985bcea
SHA256

3653f989c13a9974e1bf977c4f92a4f2bd49878fbe44452ebb07b894bb0de5ca
SHA512

557631cc834f6339e69d4b93948b2d4bf853edff52b0582351e62c41d5a7ac2af2d950e6365c3d5cc0dde093fa9be97dbf507b8bbc6be606d7c98a6627e39dee
SSDEEP

1536:Cac4x6cIfS5jLyZDVWFbn1mLvKQVXN1mZ9J3qQTRfntS+Vy:DNxif4fydVWFbkLSQp8KQFfwR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c05ac89f9c8988585b272f354b42a8_JaffaCakes118

Files

71c05ac89f9c8988585b272f354b42a8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6342bc394f2af5a80344a153196ce3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DeleteMenu
CreatePopupMenu
CreateMenu
CreateIconFromResource
CreateDesktopW
CreateDesktopA
CharUpperBuffA
CharPrevA

kernel32

InitializeCriticalSection
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
WriteFile
UnmapViewOfFile
TlsGetValue
EnterCriticalSection
EnumResourceTypesA
ExitThread
FindResourceA
FlushFileBuffers
GetDateFormatA
GetLastError
GetSystemTimeAsFileTime
GetVersionExA
LoadResource
OpenFile
OpenFileMappingA
RaiseException
SetCurrentDirectoryA
Sleep
TlsAlloc
TlsFree

Sections

.text
Size: 17KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ