028704beb8aa0c33b931dc8730924ad5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

028704beb8aa0c33b931dc8730924ad5_JaffaCakes118
Size

140KB
MD5

028704beb8aa0c33b931dc8730924ad5
SHA1

b45ccd252f8ce3698a0ec7552c62a6a5972e8ee1
SHA256

277315a3336384a23049b69dcd309e670b0f47b75b0b7e02ceb10354d8cc747d
SHA512

bdf06edc0432b8300d3cc8aba94c090d684f16cb18dbb688e970703ad439a1546e141075c824940679488fbbf194a66c5ac2065ace10b4cd53c0740ac8df2b9b
SSDEEP

3072:lxQd1RlAeKRYEtZQlHkW8VL0AgsAWSJ6i9:TQd1LAeKRMHv49AWE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028704beb8aa0c33b931dc8730924ad5_JaffaCakes118

Files

028704beb8aa0c33b931dc8730924ad5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

238fc944d1e333e45835435445847258

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ptm32.pdb

Imports

user32

RegisterClassA
SendMessageA
UpdateWindow
SubtractRect
SetTimer
SetFocus
ScrollDC
CreateCursor
MoveWindow
MessageBoxA
IsChild
HideCaret
GetUpdateRect
SetCaretBlinkTime
GetCaretBlinkTime
CreateCaret
CreateWindowExA
DestroyCaret
DestroyCursor
DrawCaption
DrawTextA
GetClassNameA
OemToCharA
GetMenuInfo

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseFontA

advapi32

DeleteService
GetAclInformation
IsTokenRestricted

Exports

Exports

FuncProc

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ