83304b5ecf590090a213edd5dc207cdc_JaffaCakes118 | Triage

Sharing

General

Target

83304b5ecf590090a213edd5dc207cdc_JaffaCakes118
Size

44KB
MD5

83304b5ecf590090a213edd5dc207cdc
SHA1

9da5bb38e5f1e365f05f52373d3e1357d8ddbaa0
SHA256

d6bf870da7f13e20e77404c68784e40278cc96857bba0276ed00129a44fd9827
SHA512

d9f5e272014bc9c6bb71f805e0fdd7ffe696c0cdf953a34d3603d9ac221770601817fee5567b94bc5bda2d4d8eba8d0d99a28137a64cb55de23bc0165fdc41b9
SSDEEP

768:FhEomi3PnhZG+YkJuTdcM81GkSZcNmlgo86zEY5ms:FhrjG+J4TdRIG9ZOVni5ms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83304b5ecf590090a213edd5dc207cdc_JaffaCakes118

Files

83304b5ecf590090a213edd5dc207cdc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a01cefafa4b9dd4ae6a93d78a0b11856

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetDateFormatA
GetEnvironmentStringsA
HeapAlloc
HeapCreate
SetEvent
VirtualFree
WaitForMultipleObjects
lstrcatA

msvcrt

malloc
_XcptFilter
__p__commode
__set_app_type
_exit
srand
setlocale
vswprintf
free
fprintf
exit

user32

EmptyClipboard
GetDlgCtrlID
EndDialog
DestroyWindow

oleaut32

RegisterTypeLi
RevokeActiveObject
ClearCustData
SafeArrayCreate
SafeArrayDestroy
VarBstrCat
SysFreeString

shlwapi

PathGetCharTypeA
SHDeleteValueA
StrChrA
SHDeleteKeyA
PathAppendA

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE