07d8a342d68f84aedcf7d4911509bec0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07d8a342d68f84aedcf7d4911509bec0_JaffaCakes118
Size

136KB
MD5

07d8a342d68f84aedcf7d4911509bec0
SHA1

399d1808e67081e7d7b8d7eece35cfccb1aded6e
SHA256

58e19e8b897d3d4016706f876b22d6e5716fc44d4f40db970f139059d8678be0
SHA512

10ef64190a0b4920ee7e7156d1bb9192b29082f3344bcfb1a828059a589ec4329a27bb869b2602130d8e0e734227fe55425f15f3ffa660df0591ab92acdb9017
SSDEEP

3072:uZlXbmKkh3IvMV3AWfMiLhQdRFXadkWGqzjTT6Pi:uZNZkh4vE3AWfMCCRpk1GqzT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d8a342d68f84aedcf7d4911509bec0_JaffaCakes118

Files

07d8a342d68f84aedcf7d4911509bec0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

27d9873ed1d7dfe0ab8d14c241468cdc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetProcAddress
GetVersionExA
LoadLibraryA
GetFileAttributesA
UnhandledExceptionFilter
lstrlenW
VirtualAllocEx
GetStartupInfoW
FreeLibrary
ReleaseMutex
CloseHandle

user32

LoadCursorW
LoadIconA
SetForegroundWindow
SendMessageTimeoutA
LoadStringA
GetWindowThreadProcessId
MessageBoxA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

shlwapi

SHGetValueA
PathRemoveFileSpecA
StrCmpIW
StrStrIA
SHSetValueA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ