0dde909d069956dc0caeb5bb7503c260_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dde909d069956dc0caeb5bb7503c260_JaffaCakes118
Size

7KB
MD5

0dde909d069956dc0caeb5bb7503c260
SHA1

df1d150381bc94962a73e402752c972397dc136f
SHA256

057a0b83fb9bbfc880233ae4cfc9f744efdd3b3710a4e669d0f2eb603a392027
SHA512

92ed58e54a0942caa6267cfe07847a0e2d39bc98f3406ac67c2dd920348129e864befd210e65853825ec046fdf6ffe756c6ea8c50a9b2afb962571082703ef46
SSDEEP

96:1tRn5cofrY06I/VY1no0VzQ7aRhmF8mUFkVgg:Vq1nqGg80Wg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dde909d069956dc0caeb5bb7503c260_JaffaCakes118

Files

0dde909d069956dc0caeb5bb7503c260_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b8601f8d90f855e2cf7d421082f246ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleW

user32

DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DlgDirListA
DlgDirListComboBoxA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DlgDirSelectExA
DragDetect
DragObject
DrawAnimatedRects
DrawCaption
DrawEdge
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateA
DrawStateW

Exports

Exports

?aewtrwtwaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkaslkjdfakdfljsalfdddddddddddddddjal1@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkewrwerwrwjal4@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?wtrwtwetwetwtaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
fafkewrwerwrwjal
fafkewrwerwrwjal1
fafkewrwerwrwjal2
fafkewrwerwrwjal3
rundll32
rundll32r

Sections

.text
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ