037c13babf93065426de07a155e985cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

037c13babf93065426de07a155e985cd_JaffaCakes118
Size

156KB
MD5

037c13babf93065426de07a155e985cd
SHA1

896a97ae00cde53364d277777168465cfcafde16
SHA256

f9ab419d1d24078ead03dff3a6c40405664f8f0bd7edc8777c6bc1392f07df24
SHA512

b72a6fd19f340f502c840614691e7b0417d737989f1f34dac075e2bc2956dda46549cce9993dae7f5b2c5ecbc208b0ea018f12d9419d0c73be38cbfd54149a11
SSDEEP

1536:PrL+kYueoB7giUPFrJEiB+xqWCuupUVZj/sneoGOu1CFMJ/d:X+kYDoFfSxJo/uoV/seoGh1l/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
037c13babf93065426de07a155e985cd_JaffaCakes118

Files

037c13babf93065426de07a155e985cd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b83d27ffa1779064b84fd0509c7a86e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strerror
_adjust_fdiv
malloc
_initterm
free

kernel32

GetEnvironmentStrings
GetConsoleMode
GetLastError
LCMapStringA
LCMapStringW
GetFileType
GetACP
GetEnvironmentStringsW

user32

GetAltTabInfoA

Exports

Exports

FrvwYoXABnQ
xeztnb
zmEOinCPlGenJit

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ