a37142773193ba177558594070177670_JaffaCakes118 | Triage

Sharing

General

Target

a37142773193ba177558594070177670_JaffaCakes118
Size

84KB
MD5

a37142773193ba177558594070177670
SHA1

0f7cae58c75f99e0f67965be5c78e2a1bc2e83aa
SHA256

42e912d83997b82d1651615d149cb5ae685daafe668ce7ff833b481c9bfb86a5
SHA512

4c35b2ca852ec2d9efe681bdb38f24f3b7e871203be42963a7cb57edb85b56acade41c04a4d186b7e80f587a1387266f12587ac4843843a1b895880d4eb9c5b7
SSDEEP

1536:GM2LtIjuUCorcvYRpvF0aO7bcJrJISpOdIAMR9rHvXnKagOK9J7dSBbNm/:YLWVcwzN0aGirJIOAM7rHvNeDpSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a37142773193ba177558594070177670_JaffaCakes118

Files

a37142773193ba177558594070177670_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b02db259a02f09a6de55206ddaf12789

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetAtomNameW
VerLanguageNameW
SetMailslotInfo
GetTimeFormatW
MoveFileExW
BackupWrite
BeginUpdateResourceA
lstrcmpiA
GetTempFileNameA
FindNextVolumeW
ResumeThread
FileTimeToSystemTime
GetDiskFreeSpaceW
GetCurrentThreadId
LoadLibraryA
GetProcAddress
GetEnvironmentVariableA

ole32

OleCreateLinkFromData
StgCreateDocfileOnILockBytes
OleLoadFromStream

user32

SystemParametersInfoW
BeginDeferWindowPos
GetCaretPos
GetClassLongW
AdjustWindowRectEx
UpdateWindow
SetWindowTextW
InsertMenuItemW

shlwapi

PathSetDlgItemPathW

advapi32

ImpersonateAnonymousToken
ReadEventLogA

Exports

Exports

AcrocrtServ

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ