0092448f9461db4233fad952e0828acf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0092448f9461db4233fad952e0828acf_JaffaCakes118
Size

261KB
MD5

0092448f9461db4233fad952e0828acf
SHA1

f6402d831327ef51800025c65f8e8d520e490a1a
SHA256

cda9dc25f9aa013ee0eb41f2a0709ff95ea5b5f42792b4bdc44ea617ceadfe41
SHA512

4988e7035f07d9c2a0ab16005eb9ef4def9d2c38b80ab7536ea1498652875350da14ae2057c559c023720aec69f04bc5c87f24bc29967a9924b04aa97497d5c4
SSDEEP

6144:HaTz8m9TttZEdwa2KOHzkduhc0zmSXw9jzlm:HZq2V2BoY2+meyjBm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0092448f9461db4233fad952e0828acf_JaffaCakes118

Files

0092448f9461db4233fad952e0828acf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b59bedf0c28781f157b9b450c0026ffa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileMappingA
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualProtect

msvcrt

fwrite
strncmp
wcscmp

user32

SetCapture
FindWindowExA
SystemParametersInfoA

comctl32

CreateStatusWindowA
InitCommonControls
ShowHideMenuCtl
CreatePropertySheetPageA

Exports

Exports

Iedtdngpb

Sections

.text
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ