d2afe689ceccf82a8f97e53e5460d3a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2afe689ceccf82a8f97e53e5460d3a5_JaffaCakes118
Size

14KB
MD5

d2afe689ceccf82a8f97e53e5460d3a5
SHA1

3e18adefaec093c738e12ae18a9b28061adb86fd
SHA256

7dafafc13888f085c8a1cfa41a849b7dc4dfd14d5e47ff7a0354f264af27ef4f
SHA512

52d699c05cac489c60846ab06fa2a14c43f8c579a57e0074359ff01bd99c8a12ed01ff3857ee3197504714686e0b8075318969ec098e66d3fb06c66dce15db80
SSDEEP

192:PvPUlbIyQV/herMKO1mM2kcQiPbLOG7oBxfAXaPCI7JYoRvNhDIgytWqF6:8yyQxKL3kcQMO+g5uiRvNWlcqF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2afe689ceccf82a8f97e53e5460d3a5_JaffaCakes118

Files

d2afe689ceccf82a8f97e53e5460d3a5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a0b24be07f21ff53ac8593298bc2ed17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
GetModuleHandleA
LocalHandle
InitializeCriticalSection
CreateMutexA
SetProcessWorkingSetSize
EnterCriticalSection
CloseHandle
FreeResource
GetEnvironmentStringsA
GetEnvironmentVariableA
DuplicateHandle
SetLastError
CreateMutexW
InterlockedExchange
HeapCompact
SignalObjectAndWait
CancelWaitableTimer

user32

BringWindowToTop
SetFocus
DefDlgProcA
DrawTextA
LoadBitmapA
InvalidateRect
CascadeWindows
SetLastErrorEx
DialogBoxParamA

gdi32

BitBlt
CreateDCW
Polygon
GdiConvertBrush
SetTextColor
GetTextColor

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ