c0b2102a542107d94c537502549cccdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0b2102a542107d94c537502549cccdd_JaffaCakes118
Size

159KB
MD5

c0b2102a542107d94c537502549cccdd
SHA1

39939d8ab2272be1e9e2fc1100662dce4ec85338
SHA256

c2695814c62bde8631835f63b948924f597292ec5366a8ecf5f08b4618b743b0
SHA512

12256b29b6f15abff61e7107dd20348a9d8916466345bae97e85411c5471d0dada5265c2291dc9b87fe41b058da8a46ef1527579be35e81dde5650a3fbf2bb21
SSDEEP

3072:BnOtTMb06I/EQ4T7zUcwe2UBsH0R3duPuW1Jpsia76dSqtTfvCdNrdXjUns:pbNicwe2NHrPuWPmio+SqtGR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b2102a542107d94c537502549cccdd_JaffaCakes118

Files

c0b2102a542107d94c537502549cccdd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dea91e8448f038f16c318ee96324ddd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetACP
GetEnvironmentStringsA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemDirectoryA
GetTickCount
HeapAlloc
HeapCreate
HeapSize
LeaveCriticalSection
ReadProcessMemory
TlsFree
lstrcatA
lstrcmpiA
lstrlenA

msvcrt

wcscpy
__p__commode
__set_app_type
exit
free
strspn
wcscat
wcscmp

user32

DestroyWindow
GetDesktopWindow
GetSubMenu
RemoveMenu
DeferWindowPos

oleaut32

ClearCustData
SafeArrayDestroy
OleIconToCursor

shlwapi

SHDeleteEmptyKeyA
PathFileExistsA
PathBuildRootA
SHOpenRegStreamA
SHSetValueA
PathGetCharTypeA
PathGetDriveNumberA
StrChrA

Exports

Exports

SetPriority

Sections

.text
Size: 76KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ