a1129e5d9e6c91a5d2f1f2e4480bd0a6_JaffaCakes118 | Triage

Sharing

General

Target

a1129e5d9e6c91a5d2f1f2e4480bd0a6_JaffaCakes118
Size

15KB
MD5

a1129e5d9e6c91a5d2f1f2e4480bd0a6
SHA1

147c9d5a83abdd8816dfc6a191856fd463f0c29f
SHA256

90921c451cb3382c888fef8e2ea66b99d22c45b280014a7fb5551c7654933110
SHA512

254ea959ad067ab2950cd163a53ecc4046fa4af6fc833cd4dc277aa62342de22be2a75820ca477bef053b0c694eab1b234c0723e6eeedf1f315b4799be3d01bb
SSDEEP

384:q/tmfE0B1rg8C6swbGhdd5JjmkSW9fWJB:qlmfE0P6n7DlFWB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1129e5d9e6c91a5d2f1f2e4480bd0a6_JaffaCakes118

Files

a1129e5d9e6c91a5d2f1f2e4480bd0a6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6853c8d2ff6e21ff8325f6c7931818ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
lstrcatA
GetSystemDirectoryA
FreeLibrary
GetWindowsDirectoryA
CreateMutexA
CreateThread
ExitProcess
GetCurrentProcess
Sleep
DisableThreadLibraryCalls
GetProcAddress

user32

GetWindowTextA
GetForegroundWindow
FindWindowExA
wsprintfA

msvcrt

fclose
fopen
printf
fscanf

Exports

Exports

CompareLinkInfoReferents
CompareLinkInfoVolumes
CreateLinkInfo
CreateLinkInfoA
CreateLinkInfoW
DestroyLinkInfo
DisconnectLinkInfo
GetCanonicalPathInfo
GetCanonicalPathInfoA
GetCanonicalPathInfoW
GetLinkInfoData
IsValidLinkInfo
MSCON
ResolveLinkInfo
ResolveLinkInfoA
ResolveLinkInfoW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ