a70886dd1399f63469fce4b556de2e66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a70886dd1399f63469fce4b556de2e66_JaffaCakes118
Size

56KB
MD5

a70886dd1399f63469fce4b556de2e66
SHA1

c323dc257866f4891ca36a693b6fc88972bb0f57
SHA256

fd719c0809f08617cf4d4770e05fd7b6147f85e2c37f21af543bbf786ee0b900
SHA512

7825a3440e83ef89d37e0552c3201ea6d20991c973572cae18258b208d0b2d099f46538fc17b1cec0e6c483d64c82ad7c0b9bab07f1a5d5e65f3446ee85928a7
SSDEEP

1536:BgeL/QC9O+tWCV1jqN0fUYHKJDgi/UGO2IzGgTK:vRoGWYOYHITUpGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a70886dd1399f63469fce4b556de2e66_JaffaCakes118

Files

a70886dd1399f63469fce4b556de2e66_JaffaCakes118
.dll windows:4 windows x86 arch:x86

49652dd54986a86944541a7bb5b2d122

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DestroyCursor
DeleteMenu
CreateMenu
CreateDesktopW
CopyRect
CharUpperBuffA
CharToOemBuffA
CharToOemA
ChangeMenuA
BeginPaint

kernel32

FlushFileBuffers
lstrcatA
VirtualFree
UnmapViewOfFile
TlsFree
TlsAlloc
Sleep
SetEndOfFile
SetCurrentDirectoryA
ReadFile
RaiseException
CloseHandle
CompareStringA
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceLanguagesW
ExitProcess
ExitThread
FindResourceA
FreeResource
GetLocalTime
GetPrivateProfileStringA
LeaveCriticalSection
LoadResource
LocalAlloc
OpenFile

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE