b8e8619d3068341f7fbc2cdb72035040_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8e8619d3068341f7fbc2cdb72035040_JaffaCakes118
Size

69KB
MD5

b8e8619d3068341f7fbc2cdb72035040
SHA1

c310c5e7c0ef9c63c1cdf5959108c288635d8199
SHA256

0ba9b796784c8829e63c5758361c9a5d558ca336a68cc5832db98653d6fdcad5
SHA512

cb3a6e4b4f5f1561fb1c07edeb921d3a9f1bd387d8c11dc6a939fa2171dc232283a98ecf9b818d10c4e7764e32358cf51e1118b8ab1c24e7509c537e538c53b0
SSDEEP

1536:kSBIHigzG0dHSGb473A5iHJJ3CJ3fmppaYFyPIGc1Ugaa0zx:kqIHJPPM73ACLWvYNQdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e8619d3068341f7fbc2cdb72035040_JaffaCakes118

Files

b8e8619d3068341f7fbc2cdb72035040_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a3fc27fba1b0b5ecdf25c5197f405214

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetConsoleCP
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
WaitForMultipleObjects

advapi32

RegFlushKey
OpenProcessToken

ole32

CreateAntiMoniker
IsAccelerator
IsEqualGUID

setupapi

SetupPrepareQueueForRestoreW

olepro32

OleTranslateColor
OleCreateFontIndirect
OleCreatePropertyFrame
OleLoadPicture

user32

GetKeyboardState
GetNextDlgGroupItem
SendMessageW
VkKeyScanExA
FindWindowExA

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ