78017ff3870c9736e8a6a8a2b2b0ba8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78017ff3870c9736e8a6a8a2b2b0ba8f_JaffaCakes118
Size

69KB
MD5

78017ff3870c9736e8a6a8a2b2b0ba8f
SHA1

04b61337bb83da33a141f19034fca4645cde1757
SHA256

5814930f140da9e9f2f176fd7161552777d19d2178d79f04cb76d94011d3d169
SHA512

d120263fbe6d5ed9027f95874f3b37b4666625d0cdc4baa8a154a99c9c37734d575d69e1cd77cd2cae800b105f69894ff844a523bc5fe6a63e2c60a582193ae2
SSDEEP

1536:drX744kPMEj7R8by6J9tCOu9KMe7HrqOQoudEJJY/r:dotPMkR8l9pF7Hrqd7dk+/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78017ff3870c9736e8a6a8a2b2b0ba8f_JaffaCakes118

Files

78017ff3870c9736e8a6a8a2b2b0ba8f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

357d3264a246450a648dba8858d447aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
ReadProcessMemory
lstrcpyA

advapi32

ElfReportEventW
ReportEventA
ClearEventLogA

ole32

CoFileTimeNow
IIDFromString
IsEqualGUID
IsValidIid

setupapi

SetupDiGetDeviceInstallParamsA

olepro32

OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleLoadPicture

user32

RegisterHotKey
ValidateRgn
CharNextW

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ