a7029925731d1d167171f17b3ee82c47_JaffaCakes118 | Triage

Sharing

General

Target

a7029925731d1d167171f17b3ee82c47_JaffaCakes118
Size

62KB
MD5

a7029925731d1d167171f17b3ee82c47
SHA1

a1696ad1f82101925dc9f63bd49d75c7daf3297b
SHA256

8e3ddd195bf00f266dc635e6889704637d7d17212a01240415aed146b5e2a457
SHA512

bdae5a55982b77d04d6348c2bf8fccac6a9af88131d6acf77812150e96020b1427502c352e2df5c5e08c68401fc92a2185e76da46f889ad26508862497f05daa
SSDEEP

1536:H0CUJI23MEVKeEsXzkxtFpSqFJiOif9jz:UCUvBVRE8QNpSe89jz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7029925731d1d167171f17b3ee82c47_JaffaCakes118

Files

a7029925731d1d167171f17b3ee82c47_JaffaCakes118
.dll windows:4 windows x86 arch:x86

29f8bd90ef2fefe0b4054ad15fd875f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareFileTime
CompareStringA
CreateMutexA
EnumResourceLanguagesA
FindResourceA
GetCPInfo
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapCreate
RaiseException
TlsAlloc
UpdateResourceA
VirtualProtect

user32

CallNextHookEx
DestroyWindow
DrawTextA
GetClassInfoA
GetFocus
GetMessageA
GrayStringA
IsWindowVisible
OpenClipboard
SendMessageA
SetActiveWindow
UpdateWindow

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ