0d599c8f92654da7e1423e31aac96b80_JaffaCakes118 | Triage

Sharing

General

Target

0d599c8f92654da7e1423e31aac96b80_JaffaCakes118
Size

136KB
MD5

0d599c8f92654da7e1423e31aac96b80
SHA1

2f4c5699226b46a81a9aa2eff588525328e8f63a
SHA256

969c88719789cb7182fbf1f66ea7d7ade55a08447d49c55cc4b1b9975aca08e9
SHA512

bcfb400fadc915fcfa09ebaa65987854eb3fda7a5a0bcab17444f69a8edf042cfba6802d976db7d189185a8390f15f1d91d9349d74af116807a0768034ec4ae7
SSDEEP

3072:aZ9XbmKkh3IvMV3A0DrBFXadkWGqzjTT6Pi:aZ1Zkh4vE3A0Rpk1GqzT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d599c8f92654da7e1423e31aac96b80_JaffaCakes118

Files

0d599c8f92654da7e1423e31aac96b80_JaffaCakes118
.dll windows:5 windows x86 arch:x86

27d9873ed1d7dfe0ab8d14c241468cdc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetProcAddress
GetVersionExA
LoadLibraryA
GetFileAttributesA
UnhandledExceptionFilter
lstrlenW
VirtualAllocEx
GetStartupInfoW
FreeLibrary
ReleaseMutex
CloseHandle

user32

LoadCursorW
LoadIconA
SetForegroundWindow
SendMessageTimeoutA
LoadStringA
GetWindowThreadProcessId
MessageBoxA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

shlwapi

SHGetValueA
PathRemoveFileSpecA
StrCmpIW
StrStrIA
SHSetValueA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ