faece85b77c07f4d0447f7c5b5c5e16c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faece85b77c07f4d0447f7c5b5c5e16c_JaffaCakes118
Size

81KB
MD5

faece85b77c07f4d0447f7c5b5c5e16c
SHA1

14a95ccde4555cb91a263c708594e70c43ebfdc2
SHA256

5b20aad530a32e63cd9de1701bd633f1a051a234640192b5abc1f97f27a7596a
SHA512

d90c9391b91b6c884f23f81b2e25619cc0558208421d102d7dcd788c64bce4117cb8996d755ae49c0f8d7f8790555bcaf8f58716fdeb1ae4fd006592172ca7a6
SSDEEP

1536:ORTLCAzSd+VYd8EDwEX6dxovkdIJN8V4XYEY4lh0BBf85VK9pxBob4b+HgEA2f:ORTeAzSdMYaEDRqsvQMNIqYEY4lYf85p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faece85b77c07f4d0447f7c5b5c5e16c_JaffaCakes118

Files

faece85b77c07f4d0447f7c5b5c5e16c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

07ad62b0d6b05ca4d650e066959953fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

macreium.pdb

Imports

user32

TrackPopupMenu
wsprintfW
LoadIconA
DrawIcon
CreateIconFromResource

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

yyacdnt

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ