a044be5b414a012f8d16727c577f36a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a044be5b414a012f8d16727c577f36a7_JaffaCakes118
Size

233KB
MD5

a044be5b414a012f8d16727c577f36a7
SHA1

2280eecffa544c28fd074cbcbc78d209a130f7b9
SHA256

523ff6798a354f1b56e311fb4496649c6a04a65e675d15f82de4874756b47188
SHA512

9d303229492ddcad8473a1761b04e8e871fbe487c76b4e1fb3e7b5f5c272e6ed174b4d8c69ba12831ddb9195d24eb82273fdc118984f30c673d75ab02203b898
SSDEEP

6144:5EDukdVjizSKlYVDPqA4tHrsTztC1UpTloxEKta:GDuajNKlAqACL8tCepmx9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a044be5b414a012f8d16727c577f36a7_JaffaCakes118

Files

a044be5b414a012f8d16727c577f36a7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e40e2eab66a7049275b9fda0e9a5e455

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetMenuInfo
GetCursor
EndMenu
DeleteMenu
CreateDesktopW
CreateCursor
CopyRect
CharUpperA
CharLowerA
BeginPaint

kernel32

GetDateFormatA
ReadFile
SetLastError
TlsSetValue
lstrlenA
lstrcpynA
RaiseException

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 47KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 184KB - Virtual size: 603KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ