7430956064cf4c86888a749419e8b6d7_JaffaCakes118 | Triage

Sharing

General

Target

7430956064cf4c86888a749419e8b6d7_JaffaCakes118
Size

158KB
MD5

7430956064cf4c86888a749419e8b6d7
SHA1

22dbcad28fdece278103c8563d380fc5e28add3b
SHA256

5f1a5780a9f37498adefc0b99026059d333388120943fb21e866e35b47764ba9
SHA512

ded988a890e3dc400c8efbedd13eebe7ae6594cdace07930560b6e6676cfe7a715386e901dacb2874f575289e836edf23674537f3de50ce6f1ea22f1877a7fb0
SSDEEP

3072:fBdmm4SnYufPDH46BArw4Jqz1hsRXU2XAiSKBTLKWBockSks2q:fBugPhBA8yqzrMXU2wdYT2WC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7430956064cf4c86888a749419e8b6d7_JaffaCakes118

Files

7430956064cf4c86888a749419e8b6d7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f856ed53973fdf24f473b978e2fa2dff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStringTypeA
GetTimeFormatA
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
OpenEventA
ResumeThread
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
WideCharToMultiByte
lstrcpyA
lstrcpynA

user32

TranslateMessage
RegisterClassExA
EnableWindow

comdlg32

PageSetupDlgA
GetSaveFileNameA

Exports

Exports

TTF_ByteSwappedUNICODE

Sections

.text
Size: 99KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ