c78c8719f7b93c32855ca937e753064d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78c8719f7b93c32855ca937e753064d_JaffaCakes118
Size

17KB
MD5

c78c8719f7b93c32855ca937e753064d
SHA1

3930b8adfecc7280f337c1146d20f0bba79608df
SHA256

62bd2dc9a73ef87b9e9d01b237ef26ca99c27f1f9c7949063f5c9f59de0d83f4
SHA512

c64aa0b8d2a33456b34806cd5e858f2f03210d1b1d1fcf73bef4491d9e950379254eb1f8cf73b70a9c0ebd21b8571e90644c835eb394f7c12ff117dd7d5d8f76
SSDEEP

384:Ne5fbrKVuLa7wAun1RHaOgARiywi5lzt1OMVy1EnlFn1Fk:053KVykyn15ahByrnO+nlFn1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78c8719f7b93c32855ca937e753064d_JaffaCakes118

Files

c78c8719f7b93c32855ca937e753064d_JaffaCakes118
.dll windows:1 windows x86 arch:x86

324ca324035cc579b02cbf5433a68fb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
MessageBeep
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.code
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ