c1497a322bdd71f9e06301e79eb4e1fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1497a322bdd71f9e06301e79eb4e1fe_JaffaCakes118
Size

100KB
MD5

c1497a322bdd71f9e06301e79eb4e1fe
SHA1

c20937bb80b1167f079ec0afd755de6e0a8ccf38
SHA256

8f0fe2d65b6ac8af7a57673777b43391c8775bb19e37ecf1db33ef6b4956725d
SHA512

62bfc618a23038aec45573c955f8d9ac9511231e570fd04aca0c98201b713cf36d4c9d0f472363f6909f81bff671b82645ee4157c41dddd66d844087f28fdcb8
SSDEEP

3072:jPhOA7LVHrIj3ICAIxqDAUwdLkfr0JDT6l:Tz7L2x6Utkfr0JD2l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1497a322bdd71f9e06301e79eb4e1fe_JaffaCakes118

Files

c1497a322bdd71f9e06301e79eb4e1fe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7f8c6f960b9ce8a88e1576e81c6c16ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ConvertDefaultLocale
CreateEventA
FindFirstFileA
FreeResource
GetCurrentProcessId
GetFileSize
GetModuleHandleA
GetStartupInfoA
GetStringTypeA
GetSystemInfo
GetTickCount
GlobalReAlloc
HeapAlloc
HeapCreate
RaiseException
ResetEvent
SetEndOfFile
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpA

user32

CheckMenuItem
ClientToScreen
GetCursorPos
GetMenuItemID
GetMessagePos
GetSubMenu
GetSysColorBrush
GetTopWindow
IsRectEmpty
ModifyMenuA
ScreenToClient
SetClipboardData
SetPropA

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ