fb4713d127f31a96b805ae60f05b008c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb4713d127f31a96b805ae60f05b008c_JaffaCakes118
Size

264KB
MD5

fb4713d127f31a96b805ae60f05b008c
SHA1

5e5d66e9d3b130c9ed2a27cb848085c3cf9ed711
SHA256

f80029515ddc2c6948f61c1c8d4a9e6c54dde00561a41f8b4f3c2b072050635d
SHA512

0130f40947a18581814b209e123d96bbdcbaa178c94fa51237cbe4e6390166127ff2362fbe85562637895f1f3503ed81adc5f905a0095150fab6977a68b40e67
SSDEEP

3072:/hm/OCcLRwZdl8lmdICokMZBM2PFvwbggOBodZ3lQTEPY/cCxs1Lq:JfLilkmdIiMZTvofOyZ1BP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4713d127f31a96b805ae60f05b008c_JaffaCakes118

Files

fb4713d127f31a96b805ae60f05b008c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2a6eb63ec16f94d6526332a38c2c1450

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReplaceFileA
GetLocaleInfoW
GetLastError
FindAtomW

comdlg32

ChooseColorA

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetDesktopFolder

oleaut32

VariantInit
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SysReAllocStringLen
SafeArrayUnaccessData

comctl32

ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Draw
ImageList_DrawEx
ImageList_SetIconSize
ImageList_Read
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Create

Exports

Exports

iitKiToiX

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ