12b2885d6e7d434f7f79affced21f5a3_JaffaCakes118 | Triage

Sharing

General

Target

12b2885d6e7d434f7f79affced21f5a3_JaffaCakes118
Size

139KB
MD5

12b2885d6e7d434f7f79affced21f5a3
SHA1

c54ddb8421f1df38a67190f5c523265afc9ab96f
SHA256

1ce78537ede428f5b6cf7f58b5dd77e0f273897b14b706d2c1fbe8b70398e66a
SHA512

4d93a49080d2e8ded3e62512fd36034c3c0bbee003e7e7b9f4891d62426fdd5bbd58244ed0f2b743007f49f62d67ec81ba169b811add7d0610df8c773dfd4d2c
SSDEEP

1536:LzJ7wPZvThSudruthQC9lbk5ZoXAf9cuBD5QVZyfkP6SSL+aeg7LmNIAjhqYi:LhEvThSuM1k528coQ/ukPKwjk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12b2885d6e7d434f7f79affced21f5a3_JaffaCakes118

Files

12b2885d6e7d434f7f79affced21f5a3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d92281bcab6612565fd3f1a62ebd34ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

FrameRect

gdi32

SetDCBrushColor
GetStockObject
SelectObject

comctl32

ImageList_LoadImageA

shlwapi

PathStripPathW
PathIsURLA
PathParseIconLocationA

Exports

Exports

TwJihHPOD

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ