c9376c7b2e34189018b493b9becb400a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9376c7b2e34189018b493b9becb400a_JaffaCakes118
Size

131KB
MD5

c9376c7b2e34189018b493b9becb400a
SHA1

51c85b896b3f5f8e4c974797cf1ab97ca22a9589
SHA256

c6df853496190721ce821eec96f102f023f29ba08468ffefba90c35b8072a284
SHA512

1de708b98e72d2c7056ea04d197f613eeb252ef05a063e5db5aee6a73864baa9dd19ce0adcf1afd4970060fb24f3aa01125a6c75fdfe3a222bd8ab0019dc7a6a
SSDEEP

3072:44qJRlasPPEjMtAHrcmKw5i862GiMp7TVrj6Xkf3Kp7Tt:414ESMyDKSiBBp7Qk/Kl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9376c7b2e34189018b493b9becb400a_JaffaCakes118

Files

c9376c7b2e34189018b493b9becb400a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fd4fbff25564df8cb721b12915701379

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapCreate
HeapSize
LCMapStringA
SetEvent
CreateFileA

msvcrt

__p__commode
__set_app_type
_cexit
srand
sscanf
strspn
time
_XcptFilter

user32

DrawIconEx
GetClassNameA
GetSubMenu
GetSystemMetrics
GetWindowPlacement
OffsetRect
TrackPopupMenuEx
TranslateMessage
DefMDIChildProcA
RedrawWindow

oleaut32

SafeArrayDestroy
SetErrorInfo
SysFreeString
SysReAllocString
SysStringLen
VarBstrCmp
RegisterTypeLi

shlwapi

PathBuildRootA
PathAppendA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA
SHQueryInfoKeyA
StrSpnA
StrStrIA
StrToIntA
SHDeleteEmptyKeyA

Sections

.text
Size: 66KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ