f97d7e0b65a4c612acccf618282642f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f97d7e0b65a4c612acccf618282642f6_JaffaCakes118
Size

247KB
MD5

f97d7e0b65a4c612acccf618282642f6
SHA1

6e8887e3a574d24647f632558c21f7e9beea1fa6
SHA256

e321a0631cfe18933ddffdce3c645f26c2ed3edd139ad79c417c457ef1036179
SHA512

af6f961a0c79464385deabf0b8c019d1fef640e92e5b47b593752a6a19bf56842c5923334ebbeaec3525758f60d8382ef2b428fc1d59a3cbf230ff3073b04e9d
SSDEEP

6144:qHVsXLqc59Mgy8aPWHOtq0xnUsem7DPrp978o/jckYHU:qy7qc59MgXaeutpmm/rp7cVHU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f97d7e0b65a4c612acccf618282642f6_JaffaCakes118

Files

f97d7e0b65a4c612acccf618282642f6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 183KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ