c90a1124bf5de82308a4c2c6c25ea411_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c90a1124bf5de82308a4c2c6c25ea411_JaffaCakes118
Size

92KB
MD5

c90a1124bf5de82308a4c2c6c25ea411
SHA1

2ebf13676961fa2a61a457353c1e1e024adba1dc
SHA256

c10b4402b0fc3ad7fc7f9d3e152ffe579ff48ba2906d2cfc8f0554178fdfbc16
SHA512

163819bf0d87f712976b34f2be10c5584463de75fce406ce566e7e4da8bf1d038df9be47df187012ddf275b132344aa5b3fd1d0e8c00bb37975f6b43e6e06fe5
SSDEEP

1536:mlNQFIr4L3gjlO7EMqK5c8bCJFj0U/M0TuW4ozFq9GoC+hLMR1ynMmpYM:cNQFy4L3gkhDi8bCPj0U/M0qPwe/C+h8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90a1124bf5de82308a4c2c6c25ea411_JaffaCakes118

Files

c90a1124bf5de82308a4c2c6c25ea411_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6cb0f215e0d9138ff15ee7dd8717cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeleteFileW
DeviceIoControl
ExitProcess
FindFirstVolumeMountPointW
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
IsDebuggerPresent
LoadModule
SetComputerNameExW
SetDefaultCommConfigA
SetLocalTime
SetTapeParameters
lstrlenA

user32

LoadMenuA
EndDeferWindowPos

comctl32

ImageList_DragEnter
DrawStatusTextA

ole32

CoCreateInstance
CreateAntiMoniker

dbghelp

SymLoadModule64
SymSetContext
FindDebugInfoFile
SymEnumerateSymbolsW

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ