0b30eab2b989c9c0de4ce4bab6352f92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b30eab2b989c9c0de4ce4bab6352f92_JaffaCakes118
Size

18KB
MD5

0b30eab2b989c9c0de4ce4bab6352f92
SHA1

9692aa165d1606c7038736d763e14c9aeb129f64
SHA256

34053cec7b2159c0a2d80045bcda43af8aab8f18acbcd4a2bf8e876734a3365d
SHA512

f0b13dce42b33a07507ec50137b1e324fcaafb90fb1e4e80094fb58199272d74e35f7c09eefa9f1f8d8279a7281b12cd48f62df1b385463476fdff99876a004f
SSDEEP

384:eyymEJ/PdOBkyryITSSW1Bfyb4sYahkzSlAfR:7dM/lzFT76sQNU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b30eab2b989c9c0de4ce4bab6352f92_JaffaCakes118

Files

0b30eab2b989c9c0de4ce4bab6352f92_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e689be5b11d8eb44506b6d6d071773e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

FindWindowA
AnimateWindow
MoveWindow
LoadStringA

advapi32

InitializeAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
GetFileSecurityA
GetTokenInformation

Exports

Exports

_eFoyuBjy

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ