088570be47142228c213e723150c733c_JaffaCakes118 | Triage

Sharing

General

Target

088570be47142228c213e723150c733c_JaffaCakes118
Size

83KB
MD5

088570be47142228c213e723150c733c
SHA1

c0a69c98c26515b96f3027bedaa9702412c87128
SHA256

0a39b39642487b85afc83d2fac7000fe0aad3f06eac3caaba8e1d91fd3e2a9ce
SHA512

a9eac74f56fd9c940b768e30b285fa9ac88311bc9cefe92d830054c76ad8db3ff3512e9948f1d32ab4c7d64728e35b8d2d46dcd7aab34a1915cbd055031da594
SSDEEP

1536:Gss+HSiKnICDIejTeEHWjptfiOP26RVjNLK7TrQ6rGLc7fD4:5HSXDIe2EHwP3RuDELcjU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
088570be47142228c213e723150c733c_JaffaCakes118

Files

088570be47142228c213e723150c733c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a789e7f37c314351eb5169a70a6bba21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsCharUpperA
EnableWindow
CreateMDIWindowA
CreateIconFromResource

kernel32

TlsAlloc
lstrcmpiA
VirtualAlloc
UnmapViewOfFile
TlsSetValue
CloseHandle
EnumResourceLanguagesW
EnumResourceTypesA
FreeResource
GetFileSize
GetLocalTime
LeaveCriticalSection
LoadResource
OpenFileMappingA
TlsGetValue

oleaut32

SafeArrayCreate
SetErrorInfo
SysReAllocString
SafeArrayAllocData
OleLoadPicture
RevokeActiveObject
SafeArrayAccessData

Sections

.text
Size: 16KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ