a4fb792546028a4c96ea9a10a071e2f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4fb792546028a4c96ea9a10a071e2f4_JaffaCakes118
Size

152KB
MD5

a4fb792546028a4c96ea9a10a071e2f4
SHA1

56ea529551dcf9bec233f136a2e5460b3bbdf702
SHA256

2e08ccb5ed7dc3a34036eaf65fa893d46af06612d30480fe285ba5ad92e88b3d
SHA512

85c6d7db059cec5247ffb85114d8c70d0dfeffa6ef2ea1acacf1c81d2083476871e4b906aa0987b114e4ffecc52cce07b2fb82929fd545c316f7ccecdc5fb606
SSDEEP

3072:Z7spf+zZNRqd6JL0S1Xm4weKvhuNxFXFQYwcJ1gdPdkikQNtZ:ZJzPHhDweKhMlaeQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4fb792546028a4c96ea9a10a071e2f4_JaffaCakes118

Files

a4fb792546028a4c96ea9a10a071e2f4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c807caf136fe83a906517a8ff4f94ced

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

W:\zPnUmgarnbOhf\fbWkSxJKoxIs\LPlVHMLvdonc.pdb

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
getenv
_amsg_exit
_initterm
_ismbblead
wcsncmp
_XcptFilter
qsort
_exit
_cexit
__setusermatherr
__getmainargs

user32

wsprintfA
SendMessageW
LookupIconIdFromDirectory
LoadMenuA
CreatePopupMenu
LoadImageA
DrawFrameControl

shlwapi

StrRChrA

kernel32

LoadLibraryW
VirtualQuery
GetModuleHandleA
EnumSystemLocalesA
FindResourceA
CreateWaitableTimerA
GetModuleFileNameA

gdi32

CreateBitmap
ScaleViewportExtEx
SetBitmapBits
SetMapMode
ExtTextOutA

Exports

Exports

H99|U
?CreateDlgMessage@@YGHPAXPADK|U

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE