93af8dc5d5a9082902a275bfa18ca303_JaffaCakes118 | Triage

Sharing

General

Target

93af8dc5d5a9082902a275bfa18ca303_JaffaCakes118
Size

152KB
MD5

93af8dc5d5a9082902a275bfa18ca303
SHA1

dfd195212aa2f2ba35c9a354332548ea63ac880f
SHA256

88f4ecb92aa3a4da91e7a9e43c204f7a562617009b7b4d7969a461ebd85d9e43
SHA512

7eeee3eaaf498afa2cdeb62b3ba0c81a9d3a827266c06dc9cf1f1b330b2177717537c284fb5cb1b8d1d3bd9a238979130e586171e9f245b1778b0ce602ae01b9
SSDEEP

3072:4z/u+h7/t9ezp9Li5U1ZngY8bY2UwOme3TDg66gKtF07DI:4zfh7/t9WSU3J2005gKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93af8dc5d5a9082902a275bfa18ca303_JaffaCakes118

Files

93af8dc5d5a9082902a275bfa18ca303_JaffaCakes118
.dll windows:4 windows x86 arch:x86

625ef7bc55f8ee8defa75cc9fc7bf99b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DuplicateHandle
ExitProcess
ExpandEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetEnvironmentVariableA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapCreate
IsValidCodePage
RaiseException
RtlUnwind
SetErrorMode
SetEvent

msvcrt

malloc
wcslen
_except_handler3

user32

LoadMenuA
SendMessageA
DeferWindowPos
DestroyIcon
GetFocus

oleaut32

SysReAllocString
VarBstrCat
SysFreeString
SafeArrayAllocDescriptor
SafeArrayAccessData
RevokeActiveObject
OleTranslateColor
OleLoadPicturePath
VarBstrCmp
OleIconToCursor
OleLoadPicture

shlwapi

PathFileExistsA
SHQueryInfoKeyA
StrChrA
StrRStrIA
StrToIntA
StrStrIA
PathBuildRootA

Exports

Exports

OpenCaptureDevice

Sections

.text
Size: 73KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ