f5d1de91b1a12643018c261889644906_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5d1de91b1a12643018c261889644906_JaffaCakes118
Size

153KB
MD5

f5d1de91b1a12643018c261889644906
SHA1

b08954e0c28bc77c5573c137f10ad177fa01385c
SHA256

a187600e21928e402df989d6f3aeb07a9c4996bcff49af1e24ce5723f7c64c7a
SHA512

a98a67158d880f5ab36b498b09729b36f2865a8f01eb7a8a647145dbc5c9aad92ae3ee0ee239137cdfbe40b3284dc4c3f06f34c1380e5cf3e48b627595546e0e
SSDEEP

3072:QjER0lhD8jSghNi2OV/iaqwMm4gvc3JKQTNdQdg9T36UUL1IZtNnGjVkwQa901:Qje0fDrtiaqwM/gyKyNAg94L1e8VtB90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5d1de91b1a12643018c261889644906_JaffaCakes118

Files

f5d1de91b1a12643018c261889644906_JaffaCakes118
.dll windows:4 windows x86 arch:x86

faa291165177e98f7e191a5126cd9c8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
FindFirstFileA
GetACP
GetLocaleInfoW
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
SetStdHandle
SizeofResource
lstrcatA
lstrcmpiA

msvcrt

vswprintf
__set_app_type
_cexit
strpbrk
wcscmp
_XcptFilter
strspn

user32

MapWindowPoints
SetWindowPlacement
GetClassNameA
GetUpdateRgn

oleaut32

SafeArrayDestroy
SafeArrayCreate
SafeArrayAllocDescriptor
SysReAllocString
RevokeActiveObject
OleTranslateColor
ClearCustData
SysStringLen
VarBstrCat
VarBstrCmp

shlwapi

PathGetCharTypeA
PathGetDriveNumberA
SHDeleteKeyA
SHEnumKeyExA
StrStrA
StrStrIA
StrToIntA
StrSpnA

Exports

Exports

OpenCaptureDevice

Sections

.text
Size: 73KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ