04871397ed28192c5a3fa2f567166e0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04871397ed28192c5a3fa2f567166e0b_JaffaCakes118
Size

15KB
MD5

04871397ed28192c5a3fa2f567166e0b
SHA1

15c728782ad306b915a852fe834e3c3b84b8d504
SHA256

4723b71f8c3331049177b3d25ec9523f9e1256451d2970ad48106be8a01e2aca
SHA512

49440e4cc8141790eac1e7c3b1e76ce2097d2a6ad0b2ab771f98d7096ec35705d79c4ab1180427af4f275145c0f68f075d972117673e1d6e23c0a4a659787d84
SSDEEP

192:3CsoWUsC5nrLXzXcvMMZtMGRP42kG2jW8OW7uErPIVy6hebYlFlt1TNHup0O:jcsyrLXzXahMG+v1Oc5rPIYklFn1Tu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04871397ed28192c5a3fa2f567166e0b_JaffaCakes118

Files

04871397ed28192c5a3fa2f567166e0b_JaffaCakes118
.dll windows:1 windows x86 arch:x86

d7f577bfac82b0874297ed3f0542bf63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.code
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ