fd348b0df9647aa4e5a0ee6eae503b86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd348b0df9647aa4e5a0ee6eae503b86_JaffaCakes118
Size

41KB
MD5

fd348b0df9647aa4e5a0ee6eae503b86
SHA1

7e44842968c35480e592d747660d7d59d9d59431
SHA256

17a087c77d3fdc27a59d40a9b0aa98bbb01fa400c5e4410773b7e3013cda8074
SHA512

3819f823006778bf807fd5553fbef90a7daf1e55d2333722b0e5fce20deeaf8bf07c796c383859d353042afb060387dd571018f8b356401d98d9b23a560ac4a6
SSDEEP

768:uhEomi3PnhZG+YkJuTdcM81GkSZcNmlgo86zEY5ms:uhrjG+J4TdRIG9ZOVni5ms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd348b0df9647aa4e5a0ee6eae503b86_JaffaCakes118

Files

fd348b0df9647aa4e5a0ee6eae503b86_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a01cefafa4b9dd4ae6a93d78a0b11856

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetDateFormatA
GetEnvironmentStringsA
HeapAlloc
HeapCreate
SetEvent
VirtualFree
WaitForMultipleObjects
lstrcatA

msvcrt

malloc
_XcptFilter
__p__commode
__set_app_type
_exit
srand
setlocale
vswprintf
free
fprintf
exit

user32

EmptyClipboard
GetDlgCtrlID
EndDialog
DestroyWindow

oleaut32

RegisterTypeLi
RevokeActiveObject
ClearCustData
SafeArrayCreate
SafeArrayDestroy
VarBstrCat
SysFreeString

shlwapi

PathGetCharTypeA
SHDeleteValueA
StrChrA
SHDeleteKeyA
PathAppendA

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ