03d5984313561c94be6791b87c807ea3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03d5984313561c94be6791b87c807ea3_JaffaCakes118
Size

210KB
MD5

03d5984313561c94be6791b87c807ea3
SHA1

dcd3df08d34be6231fe6962998dff7dd0ddc1ee4
SHA256

7663389d9d60a50a171ba8b8088f4de678de6d3b9c7a9e19aa675688a5f2a4e1
SHA512

38b1102f4a62c3ae7f4c894e01f8a85981dcd5b823f16d7266719498820e32505002625f391123176e42efac4ef8b652d56253ea9865c9d7836cd8ad4a3ba852
SSDEEP

3072:C8bpmMoKGW/TspUc13jN400urbwqw9oR9arFrqI9FU2bw:4qTo13x407rbbz7ahvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03d5984313561c94be6791b87c807ea3_JaffaCakes118

Files

03d5984313561c94be6791b87c807ea3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

97c3b0f5209281801bb890d84512a307

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetDlgItem
SendMessageW
GetParent
ReleaseDC
GetDlgItemTextA
DrawTextW
DrawEdge
DrawFrameControl
FillRect
GetLastInputInfo
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

hUrCZRYyt

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ