ade997f892bedbcb855e441065929953_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ade997f892bedbcb855e441065929953_JaffaCakes118
Size

58KB
MD5

ade997f892bedbcb855e441065929953
SHA1

521946609a4e764c479021066471f6d1f29922e1
SHA256

7069b6df004145134efa670ed1e480ccc4c2cd8e6a24b6577d93a3b8741e5e99
SHA512

5c45f8f37e20962252f7b7c47bef9300b8ba23da34b317d9d1dd7e5ccbd1905730d26214b1aee2b4724340bf314b990ab6c9426c78162863ab37c56efb41cae4
SSDEEP

1536:F7hligalhWrS5jyDoIWKfycLRccbWEt09Zfad8Xh:Fd/af7I5gK0nXh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ade997f892bedbcb855e441065929953_JaffaCakes118

Files

ade997f892bedbcb855e441065929953_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1e72807d43e6539f9e0cffb73db910d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawIcon
DispatchMessageA
DialogBoxParamA
DestroyCursor
CreateMenu
CreateMDIWindowA
CreateDesktopW
CharUpperA
CharToOemA
CharNextA
CharLowerA
EndDeferWindowPos
BeginPaint

kernel32

lstrcpyA
lstrcatA
TlsFree
GetVersion
GetTimeFormatA
GetSystemTimeAsFileTime
GetCommandLineA
FreeResource
ExitThread
EnumResourceTypesA
EnumResourceLanguagesW
EnumResourceLanguagesA
lstrlenA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE