01d2de4b9f2f894c317b43d1ad7d8728_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01d2de4b9f2f894c317b43d1ad7d8728_JaffaCakes118
Size

56KB
MD5

01d2de4b9f2f894c317b43d1ad7d8728
SHA1

6c7d828e0068868cbe2f55dfac310d7c7c6449a3
SHA256

658e36bcf471f707dd258900dbbf74235018d63ba47a70d32ebaf2e0b1e8d076
SHA512

8771da43be3fc15a7a44cbfced576c7653dfdf504dd84bc96e5f5d540bc20be589857e75d7e3fef3d07c4e5b88ffccff21f2511119863c637579e5eb60ad70db
SSDEEP

768:xZ7H2VzKcdLxwqVGexVnv3RIrpZV94INSc/r5KGUgcXVNuph305Az1LsPQDKKLmf:fH6dFx5VGeP5USYUIh30yBshQJO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01d2de4b9f2f894c317b43d1ad7d8728_JaffaCakes118

Files

01d2de4b9f2f894c317b43d1ad7d8728_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5af3db5ec6f1dccb224c74c4095641ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Folder of Working Project\ProjectTest

Imports

user32

DrawTextExW
SetRect
ShowWindow
SetCursorPos
SetWindowTextA
LoadIconA
GetDC
IsWindowEnabled
RegisterWindowMessageA
GetScrollPos
GetKeyboardType
SendNotifyMessageW

shlwapi

PathAddExtensionA

kernel32

CreateWaitableTimerA
HeapUnlock
lstrcpynW
SetFilePointer
lstrcmpA
OpenSemaphoreW
CreateEventW

Exports

Exports

_ExitWindowsExExitWindowsEx@0

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ