e1035eea29eb863438448d9c746c3338_JaffaCakes118 | Triage

Sharing

General

Target

e1035eea29eb863438448d9c746c3338_JaffaCakes118
Size

81KB
MD5

e1035eea29eb863438448d9c746c3338
SHA1

352c1a99d348cef2257a9f91d872ec947782c680
SHA256

809fdeee096931b88ac54e83d752be1cd74caa216a4d4e1a19e638577110889e
SHA512

8eb1ff98bfcdc397ea3db6523d90c94cfb21b1292a506dd4de5c671e6ef5ed8305bec93e4326c815189d0df9d6d7af573e3da3e505ec9dbca31d60da0f14a0ab
SSDEEP

1536:nEGifvLFDEG0Cyb9lgVUG8aZ/aFapOzjM9fIOPWPM2f:nXinh4X9lgVUUyFCxPmL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1035eea29eb863438448d9c746c3338_JaffaCakes118

Files

e1035eea29eb863438448d9c746c3338_JaffaCakes118
.dll windows:4 windows x86 arch:x86

07ad62b0d6b05ca4d650e066959953fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

syncbeack.pdb

Imports

user32

TrackPopupMenu
wsprintfW
LoadIconA
DrawIcon
CreateIconFromResource

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

zrwyp

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ