fe2cedaeb1a6a126c8aeb972166a78ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe2cedaeb1a6a126c8aeb972166a78ab_JaffaCakes118
Size

88KB
MD5

fe2cedaeb1a6a126c8aeb972166a78ab
SHA1

5b191c4953883cd05709b3663223e093df583d22
SHA256

9c8b83006e56dae00d9f7cc6f92537fd47f9790f6e7e4081dbeeb96fc295c280
SHA512

e193ee87364e09740d96f00ffc40b0567e34688618f670123d5041bd7a6f45d142d0d07a7d56e8490700cdfb24de5715c9f421930211e67e9a6ac6ba7b120f1d
SSDEEP

1536:Ql5tqVaqSMeIbIiYrdosdDnj1VPPBPML5yd0qGsd+N2/t/IoZtYV3d:QdqVaqSMeI+tX1VBkQd0od82WoHYVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe2cedaeb1a6a126c8aeb972166a78ab_JaffaCakes118

Files

fe2cedaeb1a6a126c8aeb972166a78ab_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8556ee860e35b150b15ed7bee7996ee0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DebugActiveProcess
ExitProcess
GetACP
GetCommandLineA
GetCompressedFileSizeW
GetLastError
GetModuleHandleA
GetProcessPriorityBoost
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedExchangeAdd
ReadFileEx
SetDefaultCommConfigA
SwitchToThread

user32

SetWindowLongA
SetPropA
SetForegroundWindow
PeekMessageA
GetSystemMetrics
DestroyWindow

comctl32

ImageList_DragLeave
ImageList_GetImageRect

ole32

CoCreateInstance
CoCreateGuid

dbghelp

SymUnloadModule
SymFindFileInPath
FindFileInSearchPath
lmi
SymGetLinePrev
SymGetSymNext64

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ