0ece6628dd7eefb57c144deb447cd020_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ece6628dd7eefb57c144deb447cd020_JaffaCakes118
Size

158KB
MD5

0ece6628dd7eefb57c144deb447cd020
SHA1

8a374174131779561a059e0668b7eae9484992b8
SHA256

e8a1bd34ecaf5dc27922f888c9d25e7d8aeef41de7be652f8bbef9ae91227558
SHA512

5f4f52c81f358001a13674ed5c0b3630226f20ac03db0b9a0a47084cb7337ffe3917785adbe1b6ed0359007de9c7d1ab50289f10d56be785f12f29c90cbfbc62
SSDEEP

3072:fAGJ99iylXfpu9ShUt4ldxf4HHPpmgWiDE2xktFUufwxwzWaAl:fA89ioXRBqt4ldxf4HHPpmU+kWKak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ece6628dd7eefb57c144deb447cd020_JaffaCakes118

Files

0ece6628dd7eefb57c144deb447cd020_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ee5fe38442962ef9903814a15cb7c883

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
ExitThread
FindResourceA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
GetOEMCP
GetProcessWorkingSetSize
GetStartupInfoA
HeapAlloc
HeapCreate
HeapReAlloc
IsBadStringPtrA
MultiByteToWideChar
OpenProcess
RtlUnwind
SearchPathA
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
lstrcmpiA

user32

GetDoubleClickTime
GetKeyState
ClientToScreen
SetWindowPos
UpdateWindow
RemoveMenu
DrawEdge
CheckMenuRadioItem

comdlg32

PrintDlgExA

Exports

Exports

NxReportCooking
OpenComponentLibraryOnStreamEx

Sections

.text
Size: 97KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ