72aca48a044628590d718ee76a8db447_JaffaCakes118 | Triage

Sharing

General

Target

72aca48a044628590d718ee76a8db447_JaffaCakes118
Size

172KB
MD5

72aca48a044628590d718ee76a8db447
SHA1

855ce3447b55f4cd34c8af380ad181d33dac5e29
SHA256

c8d26636d2133e957ee5b3f4ad6022f9770403a057cf348f6e41a69f068df17d
SHA512

9a90998ee86b1b37d8698c187b0161c99734ab87ac236cf0ce8b8f137eda13d0355d45b6eca762810b91b408f9b092d9f4bd926beb7963629280376327a07a37
SSDEEP

3072:YsT2xUAWRSLMlBK2TmVmz60x9cO7yZk5ivmnrTCYU:dvAMlBmVmz9x9c2kvsCY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72aca48a044628590d718ee76a8db447_JaffaCakes118

Files

72aca48a044628590d718ee76a8db447_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e271380fcd804dd6c7378704ad47c306

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeviceIoControl
ExitProcess
ExitThread
FindResourceA
GetACP
GetCommandLineA
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetStartupInfoA
GlobalAlloc
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
lstrcpynA

msvcrt

realloc
_exit
srand
vswprintf
_cexit

user32

ReleaseCapture
RegisterClassExA
DialogBoxParamA
ClientToScreen
PostMessageA
LoadImageA
GetWindowDC
GetUserObjectSecurity
GetMenuItemCount
GetUpdateRgn

oleaut32

SysStringLen
SafeArrayAccessData
VarBstrCat
OleTranslateColor
SetErrorInfo
SafeArrayCreate

shlwapi

StrStrA

Exports

Exports

DrawTextExW_ME
InitializeStreaming

Sections

.text
Size: 104KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ