d9edebfe3159b9ea73f365da80fdfcf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9edebfe3159b9ea73f365da80fdfcf7_JaffaCakes118
Size

241KB
MD5

d9edebfe3159b9ea73f365da80fdfcf7
SHA1

f0dcc10ec271bd1d799016502618c2fa13d2fc92
SHA256

b8eba7077e3291401a50d17f3931f09ff5e187843f0688718fc5d66eb67b3208
SHA512

0ff53db56cd6a58abf23701e29239e568b7286294ce943e375124cdb7c605677f31fd929ddef511c5bb429b35b3b070267c2413dba897afdd01d54c4afc219b6
SSDEEP

6144:9GJafiyf0TmUJEmAr2Piizgnmx+7x4s9GvAfAW82:MafiyHNNrwz+N4YGwh82

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9edebfe3159b9ea73f365da80fdfcf7_JaffaCakes118

Files

d9edebfe3159b9ea73f365da80fdfcf7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

37dbf270bfc619f4b7a89f6c0900c7d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EmptyClipboard
EndMenu
EndPaint
FillRect
GetFocus
LoadCursorA
DeleteMenu
MessageBoxIndirectA
OffsetRect
SetCursor
SetMenuInfo
ShowCaret
CharUpperBuffA
CharLowerA
ChangeMenuA
LoadImageA
wsprintfA

kernel32

OpenFileMappingA
FlushFileBuffers
EnumResourceTypesA
lstrcmpA

Sections

.text
Size: 158KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE