8448fcb1bf3d8e36478cb130d80a2770_JaffaCakes118 | Triage

Sharing

General

Target

8448fcb1bf3d8e36478cb130d80a2770_JaffaCakes118
Size

61KB
MD5

8448fcb1bf3d8e36478cb130d80a2770
SHA1

ec3a74982373a0a3068cfa880ad716824c0ecc62
SHA256

bd928b55321f576d115b81221062f6ecae259d0034b0bc9bf63237113b3def3a
SHA512

17af1ec676b70929b3d423adce6855a9e29f79d02b7ab123091e75cfe5fdb0530baf5379c49dccbe671719a5a19b7fa612d5bf167b967fe12aff8e7e77d681e7
SSDEEP

1536:tgsoTPGVZkdRU4XX3BzRixuuG26Gq2KSczky9jU:t8GVZ8RbXXRNixuuBq2Kxky9jU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8448fcb1bf3d8e36478cb130d80a2770_JaffaCakes118

Files

8448fcb1bf3d8e36478cb130d80a2770_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cce7050aa96eb69e53c9d31db9683d9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
FileTimeToSystemTime
GlobalDeleteAtom
HeapAlloc
HeapCreate
RaiseException
SetErrorMode
SetEvent
SetLocalTime
UpdateResourceA
VirtualAlloc
VirtualFree
lstrlenA

user32

AdjustWindowRectEx
CallNextHookEx
EndPaint
GetDesktopWindow
GetNextDlgTabItem
GetSysColor
IsDialogMessageA
IsWindow
ModifyMenuA
ReleaseCapture
ReleaseDC
TabbedTextOutA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ