0da56da2456c75552381fed6f244c87a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0da56da2456c75552381fed6f244c87a_JaffaCakes118
Size

147KB
MD5

0da56da2456c75552381fed6f244c87a
SHA1

734a455b3e8cc82dad72e2451964109a283e426d
SHA256

fe924d14b8fadca2825e18494e810e01c740e7de6d0b918060878f36e0812700
SHA512

820cdf9658a1a662abc550854d9c02e2ee645857b9872182b936eec8a27ecee31cadf16fa7abb7fdd6326e88e4a43394d56d92d07bba45d1110646409a0cf92b
SSDEEP

1536:CbH+wLJpmMZSKGWVe3mqeg0HhtzSV6kbleDM+QgRzytJX0Z7S/6dW5RRmSA:CbFJpmMoKGWeh0zOV+Dgg9oM+8Wvk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0da56da2456c75552381fed6f244c87a_JaffaCakes118

Files

0da56da2456c75552381fed6f244c87a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

049fc99ee66fdcc9af498b379a3e962f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetDlgItem
SendMessageW
GetParent
ReleaseDC
GetDlgItemTextA
DrawTextW
DrawEdge
DrawFrameControl
FillRect
GetLastInputInfo
ToAscii

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoCreateGuid

Exports

Exports

KOIyehUWs

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ