fd94c03bda5b9cdd95a25227d457f07a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd94c03bda5b9cdd95a25227d457f07a_JaffaCakes118
Size

39KB
MD5

fd94c03bda5b9cdd95a25227d457f07a
SHA1

889c8e5590b9530bd437ebe3e6b65acaf8fd1a87
SHA256

0674656cce7a52264c6fdff2c9a41e70443586b0c74180553d94a498f3e46648
SHA512

5c522ea302bf3e54a07be332b03efd549e3ffec3ef5166a158c5274857f6efe68c5ce1d2ff402797b38f1a10498e3b8f0424777ddd6da86c835909c0c2c18563
SSDEEP

768:GiI8Vm8284k2EF7FlcIvDzBP3V0D2fXLcyl9vvQ3sHNPE0a6ktm4vxF35e:GL8Vmw4k2GFlvp3egL1lpvQMNRcmcng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd94c03bda5b9cdd95a25227d457f07a_JaffaCakes118

Files

fd94c03bda5b9cdd95a25227d457f07a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

11fcb1b3f85079fd9160d9a15bc18ad3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindAtomA
GetProcAddress
VirtualAlloc
AddAtomA
FreeResource
FindResourceA
VirtualFree
SizeofResource
LoadResource
LockResource
GetModuleHandleA

user32

WaitMessage
wvsprintfA
UpdateWindow
TranslateMessage
UnloadKeyboardLayout
UnregisterClassA
ValidateRgn
WinHelpA
WindowFromPoint
VkKeyScanA

advapi32

RegSaveKeyA
CryptGenKey
RegFlushKey
RegEnumKeyExA
GetUserNameA
CryptAcquireContextA
CryptDestroyHash

Exports

Exports

iuvrmjy
muqmofrnz

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 919B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ