b0afa2c0861c1fc9d2fee809568894d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0afa2c0861c1fc9d2fee809568894d3_JaffaCakes118
Size

92KB
MD5

b0afa2c0861c1fc9d2fee809568894d3
SHA1

a86f9ccd96d413eb2cb6da3e98ca68b13ae4480c
SHA256

fc123e52b678595e4826987132b9cd6a5856ff9480c7eb32b1cbe9eac65f1661
SHA512

e374fb28d74e1e39686dc764df4d2b9722c20343b42340aefcebbc22be08d7bfdb2c94587b0b3b270ea175a91be5be749d1a24c71b07d2719fca494372ee8afb
SSDEEP

1536:eK8VgkTrExQIeT6jrhueSqBBZSHPRFByi5oRy592GU1lGM+GiSLoSfsFcZ:eK8+k3E59jrhysfSHPRVEy59bvM+nCoo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0afa2c0861c1fc9d2fee809568894d3_JaffaCakes118

Files

b0afa2c0861c1fc9d2fee809568894d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

daf276b48697ad962ca68d7c5e397e4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawCaption
DialogBoxParamA
DestroyMenu
DestroyCaret
CreateIconFromResourceEx
CreateIconFromResource
CreateIcon
CreateDesktopA
CharUpperBuffA
CharToOemA
CharPrevA
CharLowerA
ChangeMenuA
BeginPaint
ActivateKeyboardLayout

kernel32

CloseHandle
lstrcpyA
lstrcmpA
UnmapViewOfFile
TlsGetValue
TlsFree
LoadResource
InitializeCriticalSection
GetVersionExA
GetVersion
GetModuleHandleA
GetFileSize
FlushFileBuffers
ExitThread
EnumResourceNamesA
EnumResourceLanguagesW

Sections

.text
Size: 20KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ