721b68837e697710fe02b85b607da3b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

721b68837e697710fe02b85b607da3b5_JaffaCakes118
Size

1.3MB
MD5

721b68837e697710fe02b85b607da3b5
SHA1

193251d14adc74ea9d32856f29bc4f4ff470cd42
SHA256

74692b100e150a3ffb44c014d9d4e25ace0f2688a018956529474741c4e6600c
SHA512

80ca929ef7708441f03c2f2ace08204b8af61743eeb3b80e3cf292035aef564217dc9ee9ed69eb763d02382c5173814cfe203ea9feaef6f7429093c31ece09bc
SSDEEP

24576:foNhKJPV3Uumr/7mm/r9prp3aDWqLcYCoFdKhVlhArSkri/M1:fog2Z5D9rMWgcojuVlhArS0i/M1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
721b68837e697710fe02b85b607da3b5_JaffaCakes118

Files

721b68837e697710fe02b85b607da3b5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1ab7ad17a55e410147aeb51ce8db2bfe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA
CreateWindowExA
GetKeyboardType

kernel32

GetVersionExA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameA
GetModuleFileNameW
VirtualFree
VirtualAlloc
ReadProcessMemory
GetCurrentProcess
VirtualQuery
GetCurrentProcessId
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
TlsSetValue
GetACP
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

comctl32

_TrackMouseEvent

gdi32

UnrealizeObject

netapi32

Netbios

ole32

CreateStreamOnHGlobal

oleaut32

SafeArrayPtrOfIndex
GetErrorInfo
SysFreeString

version

VerQueryValueA

Exports

Exports

inicia

Sections

.rdata
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE