a2c093517bbcdab725977e9e54cc5d70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2c093517bbcdab725977e9e54cc5d70_JaffaCakes118
Size

142KB
MD5

a2c093517bbcdab725977e9e54cc5d70
SHA1

e9c67a1d64b1115f0a55896c63aeb1086e28ffb6
SHA256

b7aed8f713b0c06fa6d8b5dbc9e4931ab105319459ac9ae2a1fc3859b3332772
SHA512

25dc50372790f061a61523b1ccb1728520a6f8e79b5e21adf8218d41afe69d0f0d903cfc51e096d572c78216802bbe8b02eda80cfc70d209f7b988c386b95e8c
SSDEEP

3072:xOOB67/fQgQohB1I9Y9hkyX9X/F+EFPQRcEo2SsqgwY4ztl:wOBmIZCI9P4RsEscEo2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2c093517bbcdab725977e9e54cc5d70_JaffaCakes118

Files

a2c093517bbcdab725977e9e54cc5d70_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e23f15c9403413699f5c1a9c2dc7af0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetACP
GetModuleHandleA
GetOEMCP
GetProcessAffinityMask
GetStartupInfoA
GetUserDefaultLCID
GlobalLock
HeapAlloc
HeapCreate
IsBadReadPtr
MulDiv
SearchPathA
SetPriorityClass
SetThreadAffinityMask
SetUnhandledExceptionFilter
lstrcatA

msvcrt

_stricmp
time

user32

AppendMenuA
DefDlgProcA
ExitWindowsEx

oleaut32

OleIconToCursor
VarBstrCmp
SysFreeString
SetErrorInfo
SafeArrayAllocDescriptor
SafeArrayAllocData
RegisterTypeLi
ClearCustData

shlwapi

SHDeleteEmptyKeyA
SHEnumKeyExA
SHOpenRegStreamA
StrRStrIA
StrStrIA
PathCombineA

Exports

Exports

SetPriority

Sections

.text
Size: 73KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ