899267ae75d6965179030aab863d836a_JaffaCakes118 | Triage

Sharing

General

Target

899267ae75d6965179030aab863d836a_JaffaCakes118
Size

132KB
MD5

899267ae75d6965179030aab863d836a
SHA1

69d9a920d9f0c2b08ab40481309fce425290fae5
SHA256

71d068c105c8127c8c677a3afbc14c4fc9c0f50dd2a0a73b6e3c6a28563affe0
SHA512

ad923f0f7f8d765be4ec840ef39480a14815b0bbe7c36d2de08bad339e0daaa206441a9f9d2141a01e8c489f5017783eb782bcd58f1bec10e294473ecdf76895
SSDEEP

3072:CqUELx1yEq4WXtia4EtJjFUe+gK6CJpj3yVbCj4q:CqvLrRHWXtPLd+gKUYk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
899267ae75d6965179030aab863d836a_JaffaCakes118

Files

899267ae75d6965179030aab863d836a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d454e99d52225633e081d74626daa311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadContext
GlobalAlloc
GlobalMemoryStatus
HeapAlloc
HeapCreate
WriteConsoleA
lstrcmpA
lstrcmpiA

msvcrt

strspn
_exit
free
realloc
srand
time
sscanf

user32

GetFocus
MsgWaitForMultipleObjects
SetWindowLongA
FrameRect

oleaut32

OleIconToCursor
GetErrorInfo
OleTranslateColor
RevokeActiveObject
SafeArrayAccessData

shlwapi

SHSetValueA
StrSpnA
StrRStrIA
SHDeleteKeyA

Exports

Exports

D3DBreakVBLock

Sections

.text
Size: 65KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ