083fc134f174a02adf925e2ca8f8b060_JaffaCakes118 | Triage

Sharing

General

Target

083fc134f174a02adf925e2ca8f8b060_JaffaCakes118
Size

94KB
MD5

083fc134f174a02adf925e2ca8f8b060
SHA1

46b2a4dec0060135d61df9128731873e8969d634
SHA256

12fdd336b42fff15ae9606a8c25517557f5c0049a20c441dd29fba8058764579
SHA512

c459f8566a6c45e7861e7b99b6e3cea1cff8e70cc77e39e3580a7a825497f723409c48640b16940a260648460728602a5b08584f54f59d1f6eb935b8a0a95701
SSDEEP

768:IZF1MH4U9EW+7KE9waBd93tppsnn5s2KPMG6Gkmwxy8z8RjN0ehPv9b9jB39/ru:S7u4UT+udY3tppKZGH9udQRjNNPFb91

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
083fc134f174a02adf925e2ca8f8b060_JaffaCakes118

Files

083fc134f174a02adf925e2ca8f8b060_JaffaCakes118
.dll windows:5 windows x86 arch:x86

216beaffe005af3647b8e99ed375e1b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAllocEx
GetStartupInfoA

user32

LoadIconA
LoadIconW

gdi32

GetStockObject

advapi32

RegOpenKeyExW

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
exit
free
malloc
sprintf

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ