93e1b75e96777c7202e75bdb5e223414_JaffaCakes118 | Triage

Sharing

General

Target

93e1b75e96777c7202e75bdb5e223414_JaffaCakes118
Size

169KB
MD5

93e1b75e96777c7202e75bdb5e223414
SHA1

cd7fc80071ff0a1fba656fd596d339c65321fb61
SHA256

2f36aed3de2061b7a77536eb6620c567e921aa9065f4cd46b9e8c976a3d5476c
SHA512

b6c041677567c46fcf97b3a80a7b849b05040aa95edce2884fee538e9057c0de5b02f8fc7068eae24e1ecc9e4a9510a2f9c6996f2651a55252fe4edd08771c90
SSDEEP

3072:KpoEzBPEb+k3OycKHCx8qAIi7p61jY2aV1DFGAJ7W8VeUh:HEzBsb+sBCvAIC81Hy8Ag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93e1b75e96777c7202e75bdb5e223414_JaffaCakes118

Files

93e1b75e96777c7202e75bdb5e223414_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5acafc82443bd14950cbf31e3d66a4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAllocEx
LoadLibraryA
GetProcessHeap
LoadLibraryExA
RaiseException
VirtualAlloc
ExitProcess

gdi32

GetBkColor
SaveDC
CreatePenIndirect
GetBkMode

user32

TranslateMessage
UnhookWindowsHookEx
IsMenu
UnregisterClassA
GetMenu
CharLowerA
WaitMessage

comdlg32

FindTextA
GetSaveFileNameA
ChooseColorA

Exports

Exports

_jhY6e2
WoyxpMfWUsqjL
_Amy5Cmu7CZfR1K@4
_NwuBK9wgmte@8
9wrFWUKDg
_qO_Y4dfzz6Ccj2
_WIj8jLm_wlxovJ@20
_2IemZGq8wuQ@20
_CzAvM8IdKUHkxA@12
A_kLE1tCY4yN6
_htVnEXZpyZwsp
Jdq7pX3bUJ
hzy1jEP@24
6AuFipDYIKA@12
_Bwn2BjGDGR
_KE3GQXlLGa
GiWy0hxbO
_N4qDKOg

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ