b70302164a460adc2cab48391bafe35d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b70302164a460adc2cab48391bafe35d_JaffaCakes118
Size

32KB
MD5

b70302164a460adc2cab48391bafe35d
SHA1

c33003be8c7cbed677537ac3ca4e156a8be630fe
SHA256

e0a3a0a0b4e8f4d90b306f2a4d6473f437717e6d21ddc04250c61055b9bffc41
SHA512

590e54906654a80da3307f98cafc752ad594037a9d57910640cb0134ebb259892a32cd96c9338199d754ea0abc09e62680ab2c9a7dce7ae112ee786836454aab
SSDEEP

384:JHepisd2Yo1bUsE/x86w6HqWn9efBEOx3Y9BP5bav9xvRouD:gQsM/oNw6HqW9efTYTPa9xqu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70302164a460adc2cab48391bafe35d_JaffaCakes118

Files

b70302164a460adc2cab48391bafe35d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
Run
ftsWordBreak

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ