83949fdf3fd82744568fe0e0f9182c63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83949fdf3fd82744568fe0e0f9182c63_JaffaCakes118
Size

4.8MB
MD5

83949fdf3fd82744568fe0e0f9182c63
SHA1

ec14ae7d4de579755eab57beae92e535d563a294
SHA256

fd8a34ebedf98ab6fddd8eeebdfa8c75498c423daa07a8b6889c64f5e36f8b90
SHA512

884be181fe10991be2fa282d0008e4b3b2a706b5b032244b54ef0eba10a164557495f86bf05a67daea76196864b3ba8d758de5881622d1682551b92b17ceaae7
SSDEEP

98304:o7INZA6mqlANiFRpKq7GW9s6ByVOAo2oS7p+n7g5Trz9H+bbBGOlavj3V/stc4X4:FuyRcq7nRB+xoEps7UfzGG790coR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83949fdf3fd82744568fe0e0f9182c63_JaffaCakes118

Files

83949fdf3fd82744568fe0e0f9182c63_JaffaCakes118
.dll windows:4 windows x86 arch:x86

263450e68ab666d07758c9acec0c3c90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHFileOperationA

winmm

timeGetTime

Exports

Exports

update

Sections

CODE
Size: 4.8MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE