9616b74b997ea20cbb5010250f4e1ef4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9616b74b997ea20cbb5010250f4e1ef4_JaffaCakes118
Size

327KB
MD5

9616b74b997ea20cbb5010250f4e1ef4
SHA1

91dfebfcb555f4755516dbf67a196315e0f55bba
SHA256

38ee0759484bc87500ea403dd7fe3a614efdd62f0cdbb4e6f35614fec4b350c7
SHA512

a3b36f5e6c0ae0ec1a2980c232b63b5a082b6c49c0f751e696321fb1f583296b35c643ce736620afe737932ce8604a6053bfa3a69252d752a463074dbcf78534
SSDEEP

6144:fcyN8sCNPawa3RdL8kWLu523ssRA7U/46zj0V4W67e:fjN85NyBN8kF2AqV0ZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9616b74b997ea20cbb5010250f4e1ef4_JaffaCakes118

Files

9616b74b997ea20cbb5010250f4e1ef4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ae3aa3c1dedd3b06092da0a3f1d9d15f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CreateMDIWindowA
CharUpperBuffA
BeginPaint
ActivateKeyboardLayout

kernel32

GetStartupInfoA
lstrcpynA
lstrcmpA
lstrcatA
VirtualFree
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
FlushFileBuffers
GetFileSize
GetLocalTime
GetPrivateProfileStringA
GetTimeFormatA
GetVersionExA
OpenFile
OpenFileMappingA
RtlUnwind
TlsGetValue
TlsSetValue
VirtualAlloc

Sections

.text
Size: 79KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ