f00d35a6a4486c97b070054243e7d288_JaffaCakes118 | Triage

Sharing

General

Target

f00d35a6a4486c97b070054243e7d288_JaffaCakes118
Size

88KB
MD5

f00d35a6a4486c97b070054243e7d288
SHA1

04c85ba2f7ce1f4ed2a03ca82ab079a0369173bb
SHA256

2c3ec06755716daf4c1405ef338c8c60c855707cef0674e141c60294b18a2d9e
SHA512

9c034cbeb5f79a52340dae45cf220b33b653835547f6cecc5cde61c8f9bd827377c1dd99f9157c4b164b8adbccae4328a6d52f84af5b656501c05d2a87418c91
SSDEEP

1536:yKdaVhBdaMKcf28Q4pT0YkVS6nRlgYI8NLdXjRc3fFkWGq1:paBdaMKcfxQ4pTjkTRxI8NLJRgdkWGq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f00d35a6a4486c97b070054243e7d288_JaffaCakes118

Files

f00d35a6a4486c97b070054243e7d288_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1015a99bc20a3562729eb637c0602ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess

gdi32

MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
GetStockObject

Exports

Exports

vyaokku

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ