c962583ef9430e16888b9489b3a41578_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c962583ef9430e16888b9489b3a41578_JaffaCakes118
Size

19KB
MD5

c962583ef9430e16888b9489b3a41578
SHA1

8529afb994ddd83ff87bad7ea8dac23e1330dd3a
SHA256

6bb030f9c86243d523da1b8ee0c55b1c319fb0244361f96c9d0320352f405755
SHA512

6018c95659eea23a48efe76d4428219ba83debcde146c88621eb6e5624f2f31e53b0f371dfae06e6507d4854102117f3ee3735b0d7a5795acbbfb9355ff17d12
SSDEEP

384:Wvb+kc2xF4EdtBzHiODKdtU78FTZ0HQ9VQKOKMnxg9:BkcoF4/vdttL1GKMn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c962583ef9430e16888b9489b3a41578_JaffaCakes118

Files

c962583ef9430e16888b9489b3a41578_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0f2e2d38e1aba9a422479ab5b66b5b3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
CreateEventA
GetFileAttributesA
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
GetModuleHandleA
CloseHandle
SetFileAttributesW
lstrcpyA
lstrcpynA
RtlUnwind
SetFilePointer
lstrcmpA
CreateFileA

user32

DestroyWindow
GetWindowRect
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
SetWindowLongA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetDlgItem
ShowWindow
CreateWindowExW
IsWindowVisible
SetWindowTextA
EnableWindow
CallWindowProcA
SetDlgItemTextA
GetFocus

advapi32

RegQueryValueExA
RegCloseKey
RegLoadKeyW

wininet

InternetConnectA

Exports

Exports

cool
feed
plem

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ