d58ce43a9dbb3a62cc38649f05378dd0_JaffaCakes118 | Triage

Sharing

General

Target

d58ce43a9dbb3a62cc38649f05378dd0_JaffaCakes118
Size

129KB
MD5

d58ce43a9dbb3a62cc38649f05378dd0
SHA1

7bf02d5ddce17f47a974a7a17522fc3056395f85
SHA256

27b7375594d90bb0d2e017c068ff2d5670a33471b3ba78b9c66bf4d67a85f6b3
SHA512

d50ca8f964133f68a341071d802c096288cf0bcb0abf829d2168389a53f2199cf2a7aee6fecfc8713af1a91a9d15b405516107bf8d0454b8322a3a0ec929b7e5
SSDEEP

3072:JEMiqEFr0F7I3ol7ZWk17J1J1lb6XO35IR+MwUa7q:JNBEFrO7nlwk1d1Jf6X02c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d58ce43a9dbb3a62cc38649f05378dd0_JaffaCakes118

Files

d58ce43a9dbb3a62cc38649f05378dd0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b8d51733264ccfc6f244a7a4e3524b34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
FindClose
GetDriveTypeA
GetEnvironmentStringsW
GetFileType
HeapAlloc
HeapCreate
SetHandleCount
WaitForSingleObject

msvcrt

setlocale
_wcsicmp
exit
time
_exit
realloc

user32

ExitWindowsEx
wsprintfA
TrackPopupMenu

oleaut32

SafeArrayDestroy
SafeArrayAccessData
RegisterTypeLi
OleTranslateColor
SysReAllocString
OleLoadPicturePath
GetErrorInfo
SysStringLen

shlwapi

PathAppendA
PathCombineA
PathFindOnPathA
SHQueryInfoKeyA
StrChrA
StrStrA
StrStrIA
SHOpenRegStreamA

Sections

.text
Size: 63KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ