a6aa64ab9b541d9bcf6d323c8b540100_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6aa64ab9b541d9bcf6d323c8b540100_JaffaCakes118
Size

78KB
MD5

a6aa64ab9b541d9bcf6d323c8b540100
SHA1

5de4e063750dd0a0c0249eff55975dcfd7b68b3c
SHA256

d0f389282070726c3a7e67ffd768fcb03a6537f266088984bda0793b507296fb
SHA512

b9992bd8d0c35341dcb93fb782c84b41c69f3a70281945eaffe8b656275b3f5ac772ed7a3b4c9dfa44ff65713b0919b918e152ddab6756451779cb1dd85461ef
SSDEEP

1536:yac4x6cIfS5jLyZDVWFbn1mLvKQVXN1mZ9J3qQTRfntS+VS:zNxif4fydVWFbkLSQp8KQFfwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6aa64ab9b541d9bcf6d323c8b540100_JaffaCakes118

Files

a6aa64ab9b541d9bcf6d323c8b540100_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6342bc394f2af5a80344a153196ce3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DeleteMenu
CreatePopupMenu
CreateMenu
CreateIconFromResource
CreateDesktopW
CreateDesktopA
CharUpperBuffA
CharPrevA

kernel32

InitializeCriticalSection
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
WriteFile
UnmapViewOfFile
TlsGetValue
EnterCriticalSection
EnumResourceTypesA
ExitThread
FindResourceA
FlushFileBuffers
GetDateFormatA
GetLastError
GetSystemTimeAsFileTime
GetVersionExA
LoadResource
OpenFile
OpenFileMappingA
RaiseException
SetCurrentDirectoryA
Sleep
TlsAlloc
TlsFree

Sections

.text
Size: 17KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ