b73a8a9e40685beb1074b19211b57f18_JaffaCakes118 | Triage

Sharing

General

Target

b73a8a9e40685beb1074b19211b57f18_JaffaCakes118
Size

11KB
MD5

b73a8a9e40685beb1074b19211b57f18
SHA1

e8a0015ae6e9a51e632a2ceeb148946a473afc63
SHA256

9aec0a097fb90cd025e003ede1dace6a9d4afacf37a78109e992bb165f67b356
SHA512

020fbd17857f4c3ef59acf163d33ace138979a20a8b0a93257a7d438af300decdd03ab357471bfdd88f035f8418ea0e7a6d2df80f49bf0a020ede75dc2a099e6
SSDEEP

192:4RPNoNSc57tNnE0eEdMKJCBHafMoAH8biCGDowHHPFBCiGhAzzN9qdHjK0:mR67tN1mKJuAMoU8biCQopi6DdHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b73a8a9e40685beb1074b19211b57f18_JaffaCakes118

Files

b73a8a9e40685beb1074b19211b57f18_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1930b6c526dee98925744362f865b1ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
HeapAlloc
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
WriteFile
Sleep
CreateProcessA
ReadFile
FindFirstFileA
FindClose
MoveFileA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetVersion
DeleteFileA
CreateThread

user32

GetWindowThreadProcessId
EnumChildWindows
GetDlgItem
GetWindowLongA
EnumWindows
CloseDesktop
GetClientRect
FindWindowExA
CreateDesktopA
GetClassNameA

Exports

Exports

_Main@0

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ