ae90d661223bcf5dad1ba817d57f09a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae90d661223bcf5dad1ba817d57f09a1_JaffaCakes118
Size

129KB
MD5

ae90d661223bcf5dad1ba817d57f09a1
SHA1

066fc96c63ca391f039c2f651d87a8c47287689f
SHA256

0afae88eb01a6a6632adc1817447cf643ae811d2148006780ac41dae50e452cb
SHA512

9e2d96be14e00d39d1f251f82d10ea7ad7a01742230b334a4223e2a2ea4a5e55c1b601b7920a5d84a0fafb9cbe7cba3d81bcc444e54355a835658c511aff3c7f
SSDEEP

3072:dg1GJMRjUj5+BZRSprHalWLUUokPqfrfwo2xZFgoPTepwQuRRe:dnGKwZRSpmDkPqDJMHKu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae90d661223bcf5dad1ba817d57f09a1_JaffaCakes118

Files

ae90d661223bcf5dad1ba817d57f09a1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d454e99d52225633e081d74626daa311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadContext
GlobalAlloc
GlobalMemoryStatus
HeapAlloc
HeapCreate
WriteConsoleA
lstrcmpA
lstrcmpiA

msvcrt

strspn
_exit
free
realloc
srand
time
sscanf

user32

GetFocus
MsgWaitForMultipleObjects
SetWindowLongA
FrameRect

oleaut32

OleIconToCursor
GetErrorInfo
OleTranslateColor
RevokeActiveObject
SafeArrayAccessData

shlwapi

SHSetValueA
StrSpnA
StrRStrIA
SHDeleteKeyA

Exports

Exports

ReleaseSessionRef

Sections

.text
Size: 64KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ