1514c978968c9c9778777ab6efab63e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1514c978968c9c9778777ab6efab63e8_JaffaCakes118
Size

50KB
MD5

1514c978968c9c9778777ab6efab63e8
SHA1

94efd3382361fb4cb0705ee9ebdf99315feea8d4
SHA256

de93ed3f88c39168a53cc63172d9bdeb80e832d8b5749a492dfd90490f60f2c0
SHA512

21e9c9f456107dc54b401527550b77c4cb29ec96dea2e0eb005eca5fa41ec7294ce863d6e01a2e80f709359d422292f35f28f035df8e38403b25a680f3845571
SSDEEP

1536:pxvzVcDWq9wg3e/Oxx7msaU9ts4dV2NhcpgBHRWd:bqfz3e/mtnajPhxBxWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1514c978968c9c9778777ab6efab63e8_JaffaCakes118

Files

1514c978968c9c9778777ab6efab63e8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7325f24d2d6d2b74b250534abbf86087

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
ExitProcess
FatalAppExitA
GetACP
GetCommandLineA
GetDriveTypeA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcessAffinityMask
GetStartupInfoA
GetTimeFormatA
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
IsBadReadPtr
MultiByteToWideChar
OutputDebugStringA
ReadFile
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
WriteConsoleA
lstrcatA
lstrlenW

user32

GetCapture
RegisterClassExA
EndDialog
DialogBoxParamA
BeginDeferWindowPos

comdlg32

FindTextA

Exports

Exports

CreateASUSessionWithURL

Sections

.text
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ