c855d192db2af80eb111a338758ee10c_JaffaCakes118 | Triage

Sharing

General

Target

c855d192db2af80eb111a338758ee10c_JaffaCakes118
Size

88KB
MD5

c855d192db2af80eb111a338758ee10c
SHA1

60f14701fa6a17e0f73c32014abcab5becdd4b2e
SHA256

e904558e380733a8ab2c9a6c707f9ca74a780a544a1e37f75a467da3c0f49049
SHA512

28a137286cf3b314779d7d1926aa8a2f8abcbd5f47b13b0dbe826fc5f5e07562ba326e270563095517587b7613641b4fef67b24db5a2b3be8e5aeba7fbe71442
SSDEEP

1536:W1364l7P7Yxi9conNz6pxakQaa4kimfRuOM/5r9DKu:m364l7P7bXNz6naR4NmJHGrDK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c855d192db2af80eb111a338758ee10c_JaffaCakes118

Files

c855d192db2af80eb111a338758ee10c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

03544932d5ba2a7d03ef7adbfcb7adba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetComputerNameExW
GetCurrentThread
OpenEventA
SetCommState
WinExec
LoadLibraryA
lstrcmpiW
Beep
LockFile
FreeLibraryAndExitThread
ClearCommError
FindNextFileW
GetProcAddress

user32

IsCharAlphaA
WinHelpW
GetSubMenu
CharPrevW
SendDlgItemMessageA
ShowOwnedPopups
GetPropW
GetWindowRgn
SetWindowWord
GetDCEx

shlwapi

PathMatchSpecW
wvnsprintfW
StrDupA

advapi32

RegDeleteKeyA

shell32

SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetSpecialFolderPathA

Exports

Exports

xpAuthenticationdrm

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ