bd839b4c0036dff2508859f9db544e75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd839b4c0036dff2508859f9db544e75_JaffaCakes118
Size

41KB
MD5

bd839b4c0036dff2508859f9db544e75
SHA1

3474b49133995ecdc724196c7aa3338a8d9948ac
SHA256

37510674a47225be92e6c45626a8ad5391e98b00099d2165413a834fb0c6d88c
SHA512

2e17d4575f068d14cce126671a8cba909d3320f29e14b28f8f987bb991804e61bde73bd88ad6e913ab8e09e57975901a563e74879d0618076d2054ab83cb5267
SSDEEP

768:lTQ37Zbwky8ScehOz5ooCPZESrjGvC8Xcuv+aYc5ms:e37hP9ewz5GEWKvCAvhYc5ms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd839b4c0036dff2508859f9db544e75_JaffaCakes118

Files

bd839b4c0036dff2508859f9db544e75_JaffaCakes118
.dll windows:4 windows x86 arch:x86

072e7ed7a40827806d2af1472c932e3f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FormatMessageA
GetCurrentProcessId
HeapAlloc
HeapCreate
ExitProcess

msvcrt

wcslen
_wcsicmp
fprintf
setlocale
sscanf
strpbrk
time
_except_handler3

user32

GetMenu
GetUserObjectSecurity
RemoveMenu
SetFocus
SendMessageA
CreateIconIndirect
MapWindowPoints

oleaut32

OleIconToCursor
GetErrorInfo

shlwapi

SHQueryInfoKeyA
StrChrA
SHDeleteKeyA
PathGetDriveNumberA
PathCombineA
PathBuildRootA
ChrCmpIA
StrStrIA
StrToIntA
SHDeleteValueA

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ