aa55032ee413180cea4dbf9cb4560f4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa55032ee413180cea4dbf9cb4560f4d_JaffaCakes118
Size

5.0MB
MD5

aa55032ee413180cea4dbf9cb4560f4d
SHA1

ff8a423b9b5b9eeae1a3e0bacb338eb2f37850be
SHA256

d0c6ded960fad6d78e4d925ff50d9d15475a36ce8c194e62ddaba41a4580ddff
SHA512

2f9ef2faf1bd8d9f33f8a5f74af444e34e85fc9f0e0edbb3809cfee10b80f900d4ef2a49d182354010f9edd5a461ea41fc3db086d68afaf5724d5346fe156409
SSDEEP

98304:ZCabmi9TbMWzSmOLZH4DrSz5O5K58rzF3l+Z3gc:wymiJAW5YYDZU0zF1+Z3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa55032ee413180cea4dbf9cb4560f4d_JaffaCakes118

Files

aa55032ee413180cea4dbf9cb4560f4d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dc2b4456f3c6a1744a8fec58636693ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32 kernel32

VirtualFree ��

kernel32

VirtualFree

iphlpapi

GetAdaptersInfo

user32

CharLowerBuffA

shell32

SHGetFolderPathA

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 13KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ