0784642cdb805f00ad1595db1f1b2a74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0784642cdb805f00ad1595db1f1b2a74_JaffaCakes118
Size

12KB
MD5

0784642cdb805f00ad1595db1f1b2a74
SHA1

e7617990e8c5f3b5a997daecdd3d08d7a3e92610
SHA256

d779e96ea0b09c302a6d12104d3c730c5811cb49b8428503a713bf546bf0f3eb
SHA512

36d688fde7e4d0c697c995271f5094aa889e60f7a2a1f2c43f0e8d3bc59d4b4bb57982f652fa0d7f265efb2aad0c5fc4844671e6a06c7cb15a5e333d0b13a4bb
SSDEEP

384:qjocgIcMYZqaDnvIZUItbDgVIRRTxAn+7:qLcMYHhART6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0784642cdb805f00ad1595db1f1b2a74_JaffaCakes118

Files

0784642cdb805f00ad1595db1f1b2a74_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c4ddc77e8feefad171724fbde671c1fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

BeginPaint

gdi32

Rectangle
SelectObject
GetStockObject
SetDCBrushColor

ole32

IIDFromString
StringFromIID

msvcrt

wcscpy
isxdigit
isdigit
tolower
free
malloc
realloc
memmove
isupper
wcscmp
wcslen
iswdigit
vswprintf
sprintf

comctl32

ImageList_LoadImageA

Exports

Exports

rPPGWEyXu

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ