a35bea4ea3bf64ce1ff8177c6c9582f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a35bea4ea3bf64ce1ff8177c6c9582f9_JaffaCakes118
Size

95KB
MD5

a35bea4ea3bf64ce1ff8177c6c9582f9
SHA1

582e713d30cbe57890ff260a9d3ba99375a4cc4c
SHA256

edf8b21767d1c8b1a8aeb91b32d4d30f461a7909ed672a211ae469b85a6f854d
SHA512

1e04072909fbcff2316296c40f57796f05024f6a0eba194ed504c2420a605ce3e6af2ecf6683dea437588b21b7f15b585add87132aa4dd3865d32423aa8ea781
SSDEEP

1536:8bnwehTiprSeAgdsgBUTRRF1gx35C5+GnqXmMzGtICrcSuaW86OU3jMkiVTW:unwehGprryKUz7KCUAqXmMz+xrcSuaor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a35bea4ea3bf64ce1ff8177c6c9582f9_JaffaCakes118

Files

a35bea4ea3bf64ce1ff8177c6c9582f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8fa1e4e7b4d8b75de317396e6cbabfaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DestroyMenu
DestroyIcon
DestroyCaret
DeleteMenu
DefDlgProcA
CreateMDIWindowA
CreateIconFromResourceEx
CreateIcon
CreateDialogParamA
CreateDialogIndirectParamA
CreateCursor
CharUpperBuffA
CharUpperA
CharToOemBuffA
ChangeMenuA
ActivateKeyboardLayout

kernel32

EnumResourceTypesA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
WriteFile
UnmapViewOfFile
TlsAlloc
Sleep
SetLastError
SetEndOfFile
SetCurrentDirectoryA
ReadFile
OpenFileMappingA
LoadResource
GetCommandLineA
CompareStringA
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceLanguagesW
FindResourceA
FlushFileBuffers
FreeResource

Sections

.text
Size: 22KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ