cf8e5e2856b7acc7c5b52cb962fbac72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf8e5e2856b7acc7c5b52cb962fbac72_JaffaCakes118
Size

39KB
MD5

cf8e5e2856b7acc7c5b52cb962fbac72
SHA1

3b4529610511857f5e29e5ea5f4b4babf05307b3
SHA256

134524b92ed31b58a74778ad15da20ba6168466dbf6c448d8e5ae2da7611dc99
SHA512

856ff91169b5eb65a891eb9d4ea5522508fecd96f04afd528e6011d9758a5c5e0f7bdba14687661a644e0d944592af9b22e2f2c290537937810bf67382130145
SSDEEP

768:S8N35zakE9+pGZV9HzBhc3cQc8g8EYMZtJXyVT/DMCKJWMAJfVIAZAp:rN3skE9+iV9Tnc33c8gj9yVT/ULAJ9Dq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf8e5e2856b7acc7c5b52cb962fbac72_JaffaCakes118

Files

cf8e5e2856b7acc7c5b52cb962fbac72_JaffaCakes118
.dll windows:4 windows x86 arch:x86

88fc5a6acb4204af3d8af9d0cc71153c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawStateA
EnableMenuItem
EndDialog
GetCursor
GetDC
DestroyIcon
MessageBoxA
MessageBoxIndirectA
OemToCharBuffA
RegisterClassA
ShowCaret
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateDialogParamA
CopyImage
CharUpperBuffA
CharPrevA
ChangeMenuA
LoadMenuA
wsprintfA

kernel32

VirtualAlloc
Sleep
GetVersion
FreeResource
ExitProcess
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
lstrcmpA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE