892d6202071d50d2b4aec7d5b8be646a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

892d6202071d50d2b4aec7d5b8be646a_JaffaCakes118
Size

4KB
MD5

892d6202071d50d2b4aec7d5b8be646a
SHA1

07ac7baa22ee866ebc19c7364662cfffde578b18
SHA256

0b371df47aa3008d1c7d183f61b024d6d7064a2cfe075f8f48a0e1384af2a682
SHA512

4d2e17e4b15a867f97f6dbce556be3f476f128a28dca5317635b85a426cccc9d9abb98c35e0c5970118204b35110089b5eb74e4924eac01b2f4b69f79051eb40
SSDEEP

48:aMSyq+QdqfSfLCTKWsYPAQiqzgBCYzgBQsNjmvhYz6:pfedq6jWsmiYgT3sU5g6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
892d6202071d50d2b4aec7d5b8be646a_JaffaCakes118

Files

892d6202071d50d2b4aec7d5b8be646a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

50dd1a5a6780c02c6eb5d77b38904fc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ExitProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime

msvcr71

__security_error_handler
_except_handler3

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ