de88bd71a33eeb6c31f691e12bc1153c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de88bd71a33eeb6c31f691e12bc1153c_JaffaCakes118
Size

158KB
MD5

de88bd71a33eeb6c31f691e12bc1153c
SHA1

f2fe77951d7f8308b03aa46dec2ae4ae59d4c445
SHA256

08ebfb218cb09a2a14df84b9e8e38aa487a874209f75e4b4f0681c91eb320464
SHA512

08bd0f54c805d5b76a296325e0e11982f0a61f48bbe2f2607403b1293e5c41e42accfa3c5a422b76f6fe67ae87127b70bfeb567b5c149f3d5bdd57f0cf842ae7
SSDEEP

3072:DStPCe/sl5mIyUIaFEM8OSmIgaWfXXeVbwzlz28H9JeEYbFOqJV8SZ/k5gZx5lPu:OtPCe/sl5A8t8TWfXXelwBiAk784/k5o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de88bd71a33eeb6c31f691e12bc1153c_JaffaCakes118

Files

de88bd71a33eeb6c31f691e12bc1153c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4da75da4dcae78d88a62c34f7b11d04b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetACP
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
TlsSetValue
lstrcpynA

msvcrt

vswprintf
_XcptFilter
__p__commode
__set_app_type
rand
fwprintf
_except_handler3
_exit

user32

CreateIconIndirect
SetCapture

oleaut32

OleLoadPicturePath
ClearCustData

shlwapi

SHDeleteValueA
SHQueryInfoKeyA
SHSetValueA

Exports

Exports

bpf_filter

Sections

.text
Size: 74KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ