018e3e116ebe289cd76c8cbe8676a96e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

018e3e116ebe289cd76c8cbe8676a96e_JaffaCakes118
Size

319KB
MD5

018e3e116ebe289cd76c8cbe8676a96e
SHA1

2cfa946fff0389568022d92407e219559c43bd72
SHA256

c55b4a480f40dc3b7def2664a94af37eca1a81d7d3e28a8d30bbf747e80607be
SHA512

9d1b6c5f4469069f30acdfab4a8c7613e301ac652ddf6293bb2d5276fea3399e5c5017166dded729a27e3dfb3576db39313b3f4ffe4d85fabc6f157c51632493
SSDEEP

6144:6rb1GyPFz9XIfUzNwrvTejV/4ODS/FRFfzS37ahYnv:6vkezOUzSrvKtVSdRFcGhUv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
018e3e116ebe289cd76c8cbe8676a96e_JaffaCakes118

Files

018e3e116ebe289cd76c8cbe8676a96e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fba8cfcb2de6c2d8097465ee70afe33d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndDeferWindowPos
EnableWindow
DestroyWindow
CreatePopupMenu
ChangeMenuA

kernel32

FreeResource
lstrcpynA
VirtualAlloc
TlsGetValue
TlsFree
SetEndOfFile
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceTypesA
GetSystemTime
GetTimeFormatA
OpenFileMappingA
SetCurrentDirectoryA

Sections

.text
Size: 71KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ