0947e2a1d0145610ff0f01b59bbd133d_JaffaCakes118 | Triage

Sharing

General

Target

0947e2a1d0145610ff0f01b59bbd133d_JaffaCakes118
Size

84KB
MD5

0947e2a1d0145610ff0f01b59bbd133d
SHA1

822c5446c897d60bcf63365ae482cada50d38dc9
SHA256

c038dc7a80224466384f9c6320aab19ac27f48b57b38414a29bce518288edf8e
SHA512

0f96b2bde865e353d35a990e31832905f12f467ca4cacef4feb0dc90df64a362e64b702b6e74100de432330782b30f32b06ffdb36d6cdb81e67eba9df140f28f
SSDEEP

1536:ENUKTRDyaD0dQ6aVfcMRX/dahp8PUcCRp9JkkyglsmgEUzTPGnR5:e1RDn0wVpRXFiSuRpryglhgEUP8R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0947e2a1d0145610ff0f01b59bbd133d_JaffaCakes118

Files

0947e2a1d0145610ff0f01b59bbd133d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

224536d954d6d1a6d8c62cf7a7106f15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileType
LoadLibraryA
ActivateActCtx
LocalSize
SetCommBreak
GetProcAddress
GetCommState

shlwapi

PathStripToRootW
PathCompactPathW

gdi32

PolyPolyline
GetTextFaceW
CreatePolygonRgn
SetPixelV
UpdateColors

Exports

Exports

HandlerMobileUI

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ