d3c57cdd8e556d8db7e1cdf1bc43f620_JaffaCakes118 | Triage

Sharing

General

Target

d3c57cdd8e556d8db7e1cdf1bc43f620_JaffaCakes118
Size

636KB
MD5

d3c57cdd8e556d8db7e1cdf1bc43f620
SHA1

65669dd7426de18c8a7874868dcea7f7f4a87366
SHA256

4292b31547d967367344e2d84d7338f384e560be9e3233a3a5e6c96b6a2edc8a
SHA512

8f57fb58b0bc52e84bf39b91e4e03497745b020f72ad73b43046eb72588ad45c6386f2a95e163b8defda1f35166a57881993f1cd2dd2199b7ba4d84eab47ccb4
SSDEEP

6144:Wmdqccefnz8NhzlLTUNHOKF2y/1b94Z2jIJxoTmuIjlN2RRa3Ibp2OgGCK+ocRH:VHT/zChz9NKF2C4ZZKm2KIb0vxJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3c57cdd8e556d8db7e1cdf1bc43f620_JaffaCakes118

Files

d3c57cdd8e556d8db7e1cdf1bc43f620_JaffaCakes118
.dll windows:1 windows x86 arch:x86

04973c36b4d1b4cf6dc6dfff845b550f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetProcessHeap
HeapAlloc
HeapFree
CreateFileA
WriteFile
SetFilePointer
CloseHandle
GetTimeFormatA

user32

GetDC
ReleaseDC

iphlpapi

GetAdaptersInfo

msvcrt

sprintf
strtol
mbstowcs
srand
rand
time

gdi32

GetDeviceCaps
CreateFontA

Sections

.data
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ