762efe231cf79360f7a76460068efdb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

762efe231cf79360f7a76460068efdb5_JaffaCakes118
Size

159KB
MD5

762efe231cf79360f7a76460068efdb5
SHA1

9be6a6d3aa840ed555bdf2df2112aa580040d994
SHA256

9c87062e1d7a732ac6afc9bcb0ec30516447232ffb435b3100ef580a614212ec
SHA512

6ec3efbf675d783a83342624a41e109a5448d5a823c816e6cf6f2f893c64966515d289b05e0d63d292efd3cfad786363799d7d5b5de369fc1767fa06fe41f9b2
SSDEEP

3072:P7EVQMXgd5Df+mT6f3Bnxbrgsqs9fEchGahxpFozClID5SODo:P7r9jgn9B9McGahxpFGClIcOD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
762efe231cf79360f7a76460068efdb5_JaffaCakes118

Files

762efe231cf79360f7a76460068efdb5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d58a95acd122023a094eea687e5fc896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
FindClose
FindResourceA
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetThreadContext
GlobalUnlock
HeapAlloc
HeapCreate
LoadResource
LockResource
MultiByteToWideChar
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
WaitForSingleObject
lstrlenA

msvcrt

wcscat
_except_handler3

user32

GetPropA
PeekMessageA
SendMessageTimeoutA

oleaut32

SafeArrayAllocDescriptor
OleIconToCursor
VarBstrCmp

shlwapi

SHDeleteKeyA
SHEnumKeyExA
StrToIntA
ChrCmpIA
PathGetCharTypeA

Exports

Exports

GetNextReadyBuffer
TTF_WasInit

Sections

.text
Size: 100KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ