71c8178f35f5ea98024a19c9fa992091_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71c8178f35f5ea98024a19c9fa992091_JaffaCakes118
Size

66KB
MD5

71c8178f35f5ea98024a19c9fa992091
SHA1

43f33f87995e7e42e97a40d7e52a1c293325e045
SHA256

97a2c4100a8a31c871ca94a8f4948ce67dd7acae3bbcf6e5088a11cb9eacb8c8
SHA512

1b1acc59b3c46f783ac98716cc10e4d2c5afa0b2b340f9d28d75766164340bcb20e8a7ba0da8df8eaaee1cc10f0d5ed9930291c4b18973889b4603f6b12fbfd4
SSDEEP

1536:zK0qCnRuKE9AK7ShP5r1IJdOrbryos96SVR91b1S:zKpGUKEGK7SZ5r1IrYSP6SH1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c8178f35f5ea98024a19c9fa992091_JaffaCakes118

Files

71c8178f35f5ea98024a19c9fa992091_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7f8c6f960b9ce8a88e1576e81c6c16ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ConvertDefaultLocale
CreateEventA
FindFirstFileA
FreeResource
GetCurrentProcessId
GetFileSize
GetModuleHandleA
GetStartupInfoA
GetStringTypeA
GetSystemInfo
GetTickCount
GlobalReAlloc
HeapAlloc
HeapCreate
RaiseException
ResetEvent
SetEndOfFile
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpA

user32

CheckMenuItem
ClientToScreen
GetCursorPos
GetMenuItemID
GetMessagePos
GetSubMenu
GetSysColorBrush
GetTopWindow
IsRectEmpty
ModifyMenuA
ScreenToClient
SetClipboardData
SetPropA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 835B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ