a2806b468f81b9c849183da957d47303_JaffaCakes118 | Triage

Sharing

General

Target

a2806b468f81b9c849183da957d47303_JaffaCakes118
Size

28KB
MD5

a2806b468f81b9c849183da957d47303
SHA1

898df59d74a571ed9affcd41d95357e2e3cc6dda
SHA256

5b113b598b47792c418c6490b3f4fd216abd046b759d2e065ef4d28d141e5955
SHA512

b7c79e0eb7eecebe256ce3eb26f8ef9b2b8f4a30d24e7ead4409a8350dc0d9580274176d752cc4e409f3099914140b1da55b0689fe9d9cd536bc98e20a5cbe01
SSDEEP

384:dZLbiyuZVrH7jhIxMnV7t2qjCJsLGmlRe9Op6yAUS3Q6Le0dZC0:dZXiyu7r7jvnFIgtLrlR4OCUS3htdb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2806b468f81b9c849183da957d47303_JaffaCakes118

Files

a2806b468f81b9c849183da957d47303_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9234fd4883ba713a7215d746db0bdcf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
EnumResourceLanguagesA
ExitProcess
GetACP
GetCommandLineA
GetDateFormatA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
RaiseException
RtlUnwind
SetLastError
TlsSetValue
VirtualAlloc
lstrcatA
lstrcpyA

user32

SetCursor
SetFocus
SetMenuInfo
LoadImageA
EqualRect
DrawStateA
DrawIcon
DestroyMenu
CreateDesktopA
ActivateKeyboardLayout
CloseWindow

advapi32

RegOpenKeyExA
RegQueryValueA
RegEnumKeyA

setupapi

SetupFindNextMatchLineA
SetupFreeSourceListA
SetupGetInfFileListA

Exports

Exports

Mhdxdegvx
Qkat
Uidemj

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ