c8ee97a98fa41fc916ec7fe8cc3ce8a4_JaffaCakes118 | Triage

Sharing

General

Target

c8ee97a98fa41fc916ec7fe8cc3ce8a4_JaffaCakes118
Size

172KB
MD5

c8ee97a98fa41fc916ec7fe8cc3ce8a4
SHA1

a175bbf558721da09b511ddef7a85fefe206b465
SHA256

0666e0d99a9dd4b4936ab07d55409df11db5bb3c5e9ead8810784c1c4a6877ef
SHA512

26e8a88337794cfca4be16edff766645d9dc739f6b272747d681622f29c933f1b6fd0df6d312f4bb0b1555f3a6245dde2ab9e2bdbef07092daac252c28945272
SSDEEP

3072:+Kp0AuGDDLOsOOBY+SBEOrjxX8gmbB/mQQ4ZPINMnJEwRma5Ocot3M:+DhPsY+4Vf2gmbB/Q4ZdJEuma5tc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8ee97a98fa41fc916ec7fe8cc3ce8a4_JaffaCakes118

Files

c8ee97a98fa41fc916ec7fe8cc3ce8a4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

45208accc870f1a1f57e76fcabab786d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
GetOEMCP
VirtualAlloc
LoadLibraryA
GetCurrentProcess
GetCurrentThread
lstrlenW
ExitProcess
GlobalAlloc

user32

GetCapture
DrawMenuBar
GetDC
GetTopWindow
GetCursor
LoadIconA
GetWindow

gdi32

CreateDIBitmap
GetBkColor
CreateFontIndirectA
GetObjectA
GetPaletteEntries
CreateDIBSection

Exports

Exports

_yMct7_P3@20
_lac8R2E01z@24
R1EXI4uJIH@4
_GYddB5HO@4
yct61eg@24

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ