88a7135d792fddb28adf2dff4e3da9f9_JaffaCakes118 | Triage

Sharing

General

Target

88a7135d792fddb28adf2dff4e3da9f9_JaffaCakes118
Size

87KB
MD5

88a7135d792fddb28adf2dff4e3da9f9
SHA1

c1f18b2eb01acac83534a6195a240cc997ef4388
SHA256

a886a1f639e78dd94c229d7fab7247838ddf590d4925618deb96db9e09fbe0a9
SHA512

49350528d271aaa05ffcc7881baed4df1dd146dd223e442f3a587475023b2db880d93ddbcb1ea7dc0796e41ee0268815067ad5d58c0683dd2c1ce729100c6cc0
SSDEEP

1536:OjBTmYLCp4cCcqrAId7seZ2awfBtR3HyqVLA4lGge9tN/zXxudM4IK:9YmRCczIRxBur3PGh//sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88a7135d792fddb28adf2dff4e3da9f9_JaffaCakes118

Files

88a7135d792fddb28adf2dff4e3da9f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

73749ab1318b847d2cfdca11ac430b72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDC
DialogBoxParamA
CreateDesktopW
CharUpperA
CharNextA
CharLowerA

kernel32

GetSystemTimeAsFileTime
VirtualFree
ReadFile
RaiseException
lstrcmpiA
lstrcmpA
CompareStringA
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
ExitThread
FindResourceA
FlushFileBuffers
FreeResource
GetCommandLineA
LocalAlloc
GetTimeFormatA
GetVersion
LoadLibraryA
LoadResource
lstrcatA

oleaut32

SetErrorInfo
SysFreeString
RevokeActiveObject

Sections

.text
Size: 18KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ