74aced03a54314fa3c850c3273667c50_JaffaCakes118 | Triage

Sharing

General

Target

74aced03a54314fa3c850c3273667c50_JaffaCakes118
Size

112KB
MD5

74aced03a54314fa3c850c3273667c50
SHA1

c662e312ff679644480c23959681e1470da7b39f
SHA256

4fd8308854ca458cb048e2be76e8ee229f0d66c6e6da7c6efcc129ab4930a14d
SHA512

d6ce08b0959c4bf6e40aa3b6e236d4634fcce44de9b2f6bb37d2a48193251e79217d7683bfc738c211e7b3ee1d19962eb23b9f555d37d12490065538b1ac7078
SSDEEP

3072:2SzJKqzrxgcMI63dHYreWQcUhNYu9PmlyIRBHt2m6bTT+jExAa:2cKqpwnN4reH9DEfCT+jE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74aced03a54314fa3c850c3273667c50_JaffaCakes118

Files

74aced03a54314fa3c850c3273667c50_JaffaCakes118
.dll windows:4 windows x86 arch:x86

70e8182415487f36294e46f678914296

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawIcon
DestroyWindow
DestroyCursor
CreateMenu
CreateIcon
CloseWindow
CharToOemA
CharPrevA
ChangeMenuA

kernel32

GetDateFormatA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
TlsAlloc
RaiseException
OpenFileMappingA
OpenFile
InitializeCriticalSection
EnumResourceLanguagesW
ExitThread
FindResourceA
FreeResource
GetFileSize
GetLocalTime
GetStartupInfoA
GetTimeFormatA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE