ec167dfcc2008569a93e7b37833a6be8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec167dfcc2008569a93e7b37833a6be8_JaffaCakes118
Size

84KB
MD5

ec167dfcc2008569a93e7b37833a6be8
SHA1

d2045a6787d044c59f18a5fb23b26db34247fb38
SHA256

4a57263f54e81f4c79bf37fb2f2aa5c071fc7ebae27fe3bbf0a761d7b1664559
SHA512

3b0803322adb98795476de0da5c824e574bd879708519cd2cd86200b537156b0b877868a3c362fd14350c070401e06bc63858d08bc06043bc107cd5b86a4c210
SSDEEP

1536:NBMcxpVD9ZutmO6gjZ/3Ft8UwEkeddh7UVrUIIvx1Nji9rrMMsHRI5vuHu:NBMUpnZu4b2vt8pEDLhAVC/FarrVGMvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec167dfcc2008569a93e7b37833a6be8_JaffaCakes118

Files

ec167dfcc2008569a93e7b37833a6be8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dd932b1a8f5caa7c6742dce50c0a7c23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

wininet

InternetSetOptionA

Exports

Exports

CPlApplet

Sections

.text
Size: 73KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE