ff4dfe184dccecff50f55c53627f8310_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff4dfe184dccecff50f55c53627f8310_JaffaCakes118
Size

977KB
MD5

ff4dfe184dccecff50f55c53627f8310
SHA1

d22f28b04e0f03c92c8418c44871838a78e0c5f7
SHA256

284b2e88c334e120617831b3c43dcd10ad28ee611f02c42ae7b82e10d7f11bf5
SHA512

57fff91ca008293f4f1628b12872141be933808a7ec77992fa1ad49b82bd405e786def329563fccb720c8ce2eb360f019bce2c0d656a6a93737ffc054c5ef533
SSDEEP

3072:XVE4ESPd/ykBX+gT8xposndp8WD0+aGUeVA/HfHQbu1D:i47dHOgT0pJdp8WD0+aGt63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff4dfe184dccecff50f55c53627f8310_JaffaCakes118

Files

ff4dfe184dccecff50f55c53627f8310_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d021cf1af92a2367b6cd8c629891c8f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
SetThreadPriority
SetThreadAffinityMask
CloseHandle
SetThreadExecutionState
lstrcpynW
Process32FirstW
RaiseException
SetConsoleCtrlHandler
Sleep
SetErrorMode
SetupComm

user32

ValidateRgn
GetWindowRgn

advapi32

SetSecurityDescriptorControl

gdi32

SetPixelV
SetROP2
SelectPalette
GetCurrentObject
RectVisible

msvcrt

__p___mb_cur_max
_wcslwr
_osver
_ismbcsymbol

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ