b9ca65fe8ad1712dd650b143a82be508_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ca65fe8ad1712dd650b143a82be508_JaffaCakes118
Size

56KB
MD5

b9ca65fe8ad1712dd650b143a82be508
SHA1

4cb595ea907bba52b0f19ed3a115ec3b68bb075f
SHA256

705e98ded07c9c534ad67d31946b79c55435e56a7bc75286a4f7b034f6446107
SHA512

cd9de5efaf7e8b9e0cd9f2b0e6c475ef06112e931f7bb4c617be365c18d53c2589106da002469bbcc005d3ef65919ed36301ce2217c9fa311bf8c2f9a9ca011f
SSDEEP

768:nalwIRqnmpjsmHHqlJfQwDvlwvA0ttaXIAov5DVyJBXoeZ09Xm8kCs/rEUbo7cqz:8wIRqnmjsNCh+TEJ4XoeZ2cz/QNwAl4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ca65fe8ad1712dd650b143a82be508_JaffaCakes118

Files

b9ca65fe8ad1712dd650b143a82be508_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1b33269bd7a472d0b1f14b3fa0f3c838

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DispatchMessageA
DefDlgProcA
CreatePopupMenu
CreateDialogParamA
CreateDesktopW
CreateDesktopA
CreateCursor
CopyImage
CharUpperBuffA
CharUpperA
CharToOemA
ChangeMenuA

kernel32

GetDateFormatA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
ReadFile
RaiseException
OpenFileMappingA
OpenFile
LocalAlloc
LoadResource
GetSystemTime
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceLanguagesW
ExitProcess
GetCommandLineA
GetFileSize
GetLastError
GetModuleHandleA
GetPrivateProfileStringA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE