efed1ecf1c471eb587dd6e6f6d216987_JaffaCakes118 | Triage

Sharing

General

Target

efed1ecf1c471eb587dd6e6f6d216987_JaffaCakes118
Size

13KB
MD5

efed1ecf1c471eb587dd6e6f6d216987
SHA1

30edf5b6e7d205da2d8fc640e5403e4fe18e4a39
SHA256

3c6dadad22e401aa360d1e12ac1b772f0149c24d044fed746beaeff630fb9af4
SHA512

f6c2929739b5ef67cfa782911ee221191d90c28af666c78c0e0bafbf6c3a57c48e170d1870126f036202927251565d4d991b2debe702f6f5289f6dbb5a91bfc3
SSDEEP

192:/i6sGcVyxwNujvzvbaCvEZ182P4FPIMjp4wXz0W1Sa8SaVO7GI3EVqiVg+ej:4ZQwNurfaB8FFPIJeMZSaVEt3Enm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efed1ecf1c471eb587dd6e6f6d216987_JaffaCakes118

Files

efed1ecf1c471eb587dd6e6f6d216987_JaffaCakes118
.dll windows:1 windows x86 arch:x86

9273a2d64d4e4b1652172f56edd38bb3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.code
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ