0947d5f74a00f076e7314fbf94c0e739_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0947d5f74a00f076e7314fbf94c0e739_JaffaCakes118
Size

238KB
MD5

0947d5f74a00f076e7314fbf94c0e739
SHA1

d4845f446fb53531a663f5c1caca0a6f3e2aadea
SHA256

81d2e19d1c687a3dec60db1f66aa5147fdb53cdbaf8a68a2a8e18dee92264098
SHA512

b0d40f996617d006990454e3be1c86ede6c72083ea9f1cc07e7454ada9ffc5b2ac3a4775047001175bcb9ea156dae41ddd33bb0a87b3d7f2d962ddfd65fa1d24
SSDEEP

3072:X8bpmMoKGW/TspUc13jN400urbwqw9oR9arFrqI9FU2b:FqTo13x407rbbz7ahv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0947d5f74a00f076e7314fbf94c0e739_JaffaCakes118

Files

0947d5f74a00f076e7314fbf94c0e739_JaffaCakes118
.dll windows:4 windows x86 arch:x86

97c3b0f5209281801bb890d84512a307

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetDlgItem
SendMessageW
GetParent
ReleaseDC
GetDlgItemTextA
DrawTextW
DrawEdge
DrawFrameControl
FillRect
GetLastInputInfo
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

hUrCZRYyt

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ