0d6ceb1398971db5e584a3cd644e95b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d6ceb1398971db5e584a3cd644e95b6_JaffaCakes118
Size

239KB
MD5

0d6ceb1398971db5e584a3cd644e95b6
SHA1

159f2e5d88b13a7e1825494f4f5b40e48cca5cab
SHA256

dbc043cb79369b1513d1aa530e7c0220eb793401307bb73a2467f9cc7adfb8dd
SHA512

b89898e70a45938c6673b6fbe545750c4b484abb0dacfdb535eabf32557e017379f898663b01814ac83a53979f324e25c86421593d3bcdce0b11c5fa1c208430
SSDEEP

3072:m8bpmMoKGW/TspUc13jN400urbwqw9oR9arFrqI9FU2b:MqTo13x407rbbz7ahv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d6ceb1398971db5e584a3cd644e95b6_JaffaCakes118

Files

0d6ceb1398971db5e584a3cd644e95b6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

97c3b0f5209281801bb890d84512a307

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetDlgItem
SendMessageW
GetParent
ReleaseDC
GetDlgItemTextA
DrawTextW
DrawEdge
DrawFrameControl
FillRect
GetLastInputInfo
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

hUrCZRYyt

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ