0b9a0a91b4f82662ced59894489d81b3_JaffaCakes118 | Triage

Sharing

General

Target

0b9a0a91b4f82662ced59894489d81b3_JaffaCakes118
Size

88KB
MD5

0b9a0a91b4f82662ced59894489d81b3
SHA1

3c8cc8f673d539f3fa282501ee03da023b430c23
SHA256

ec99a4c78df5604e1008579601518eac0772248ffc5cec0c6a0cbb8b80782b73
SHA512

c778a38927c3b2fcdf30cc5cd5b976b4ea1552a32c9dddf993e0bbeaba40de84a51eb16797949727bf0c7cbd8c9c173c4fcba23acecec40e7d4feac6630bd49a
SSDEEP

1536:KoyfOTy+95U44hcACedltNDpB+Pl+Ntu8Bffdza1mHsE3mpyLEH9dIvYxSIHTooN:KoSAz9evhxCefDbal+Nt7fpa1mypyLYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b9a0a91b4f82662ced59894489d81b3_JaffaCakes118

Files

0b9a0a91b4f82662ced59894489d81b3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b3de338a76c457df07c8adf6d74ca981

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

LoadIconA
GetFocus
FillRect
EndMenu
DialogBoxParamA
CreateIcon
CreateCursor
BeginPaint

kernel32

LoadResource
UnmapViewOfFile
GetVersionExA
GetVersion
GetTimeFormatA
GetStartupInfoA

oleaut32

OleTranslateColor
SafeArrayAllocDescriptor
SafeArrayCreate
SysReAllocString
SysStringLen
VarBstrCat
VarBstrCmp
OleLoadPicturePath
ClearCustData
OleLoadPicture

Sections

.text
Size: 16KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ