b67ed240f7826db119a02b5081514333_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b67ed240f7826db119a02b5081514333_JaffaCakes118
Size

55KB
MD5

b67ed240f7826db119a02b5081514333
SHA1

8f2cfb03d44f62f8e560957425eac3123a7d73d7
SHA256

093aad472ed9f1c03986e77cd21089019ad8e92ba797129c562f4f359f9db1ab
SHA512

6a5f945828e4f0746a4d0e34bddc237b25469676dde825e56ef558ae0551c24c10e4642e610032213b5debabfc0009acc8c4f5c9d342d7662ee14b971c23f1bc
SSDEEP

768:3RoxJz+V43U32AX4v6IBgDaP7IKygyYxN6qwGm3LUNygbrjykMd7U5xXNUlAXu+D:Box1kb3/X4vNW+P/P8q49g/VYuXyXMt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b67ed240f7826db119a02b5081514333_JaffaCakes118

Files

b67ed240f7826db119a02b5081514333_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bbcbf071a7d39c1b83fbb200832edf37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawMenuBar
DrawCaption
DispatchMessageA
DialogBoxParamA
DestroyIcon
DestroyCursor
DestroyCaret
CreateIcon
CreateDesktopW
CreateCursor
CreateAcceleratorTableA
CharUpperA
CharToOemBuffA
CharToOemA
CharNextA
CharLowerA
BeginPaint
ActivateKeyboardLayout

kernel32

EnterCriticalSection
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
VirtualAlloc
UnmapViewOfFile
TlsAlloc
SleepEx
SetLastError
SetEndOfFile
ReadFile
OpenFile
GetModuleHandleA
GetLocalTime
GetFileSize
GetCommandLineA
FindResourceA
EnumResourceLanguagesA
CloseHandle

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE