b6efe98acdb4b24bb0a4de0c653155c3_JaffaCakes118 | Triage

Sharing

General

Target

b6efe98acdb4b24bb0a4de0c653155c3_JaffaCakes118
Size

41KB
MD5

b6efe98acdb4b24bb0a4de0c653155c3
SHA1

11fb5c78e77ea241651ae03b73b58eca4682dfea
SHA256

a474698d09e975ac376842236e1d5c9209eb48e84180958f57d4bd084b24c753
SHA512

75006a204e5c966055b6c4c25efc35cb566b907f8c9664a2de714c6f55fe777b3315001ecb904374a8b5f1ac3023f2788fc6f3c7cfbd9041c946a47635c851cc
SSDEEP

768:fNVZWt4bZ3icwDw7+6LgCOmATMh2TcX8T6GGEi7Bx/ckc3Y+AXnxuQ:fNVZWt4t3ifDa+ClRATe2Ts8T6VLFTBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6efe98acdb4b24bb0a4de0c653155c3_JaffaCakes118

Files

b6efe98acdb4b24bb0a4de0c653155c3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3737e55029be44d76ada9789d7dfb55f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
GetLocaleInfoA
GetSystemInfo
GetVersion
HeapAlloc
HeapCreate
HeapFree
LoadLibraryA
LocalAlloc
QueryPerformanceCounter
SetErrorMode
lstrcmpiA
lstrcpynA

msvcrt

strpbrk
__p__fmode
_stricmp
exit
fprintf
free
time
swscanf
wcslen
isdigit
fwprintf

user32

GetWindowLongA
RegisterWindowMessageA
SetCapture
SetUserObjectSecurity
GetKeyState

oleaut32

SafeArrayAccessData
OleLoadPicturePath
SafeArrayDestroy
SysReAllocString
SysStringLen
VarBstrCat

shlwapi

PathAppendA
PathGetCharTypeA
PathGetDriveNumberA
SHDeleteValueA
SHOpenRegStreamA
StrSpnA
StrToIntA
StrStrA

Sections

.text
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ