7259d5f60c0d810885db80e1e7544f9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7259d5f60c0d810885db80e1e7544f9d_JaffaCakes118
Size

43KB
MD5

7259d5f60c0d810885db80e1e7544f9d
SHA1

841ae010b85c0522a04ee7dfd36a01f859a98bb1
SHA256

437f607a3942a42553433dc65235b18d9a851768f3b21e92cd2e9f517543af55
SHA512

a86d31fe08b3cb75e57a12c251d5c082ec0cefee49090e02ad3dbe4258b9fb1c4bb8c16c458bf6f3d7c5da045090425a381d8c3ceda586a69962f27e3192dbff
SSDEEP

768:Dx5rmydsbsBHO6lXVbedDpTVp5qroLuDkdTa7hELOpDoTTJpdjR88uH6/fU:D7rm7bsBHBlXVb25koLPoEXL1luH6/fU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7259d5f60c0d810885db80e1e7544f9d_JaffaCakes118

Files

7259d5f60c0d810885db80e1e7544f9d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ