84b71ae72ab65551889892969edd51b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84b71ae72ab65551889892969edd51b7_JaffaCakes118
Size

104KB
MD5

84b71ae72ab65551889892969edd51b7
SHA1

70a129dce241a5dca8af4e86334d9da6755393ab
SHA256

a85cfd462b8b0de3034860a41fff737a2d93052329b5eca4310e77d3e3a1d99e
SHA512

a33b2eb2a35633ebfeabb591fa4e05c993fc12e1b87a2ed248b5fdf772492be2ba665fad1a936ed93a10d4e98d7db85cdb8f645b4a6d1368879b4315e31a5dcc
SSDEEP

1536:zqGsmoQdI3KkZ/2FRkIFmMkjPKHEmOS2juglfFkWGq6cjTA:zqQuKkZ/wPFyKHEFdldkWGqzjTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84b71ae72ab65551889892969edd51b7_JaffaCakes118

Files

84b71ae72ab65551889892969edd51b7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1015a99bc20a3562729eb637c0602ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess

gdi32

MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
GetStockObject

Exports

Exports

trdxnzo

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ