131043ee35b9c09aed33995b78794ae8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

131043ee35b9c09aed33995b78794ae8_JaffaCakes118
Size

138KB
MD5

131043ee35b9c09aed33995b78794ae8
SHA1

b0b2d626f714d59cf7156202af40e0f503a6f347
SHA256

7aec7ce35402fca73e2d68170cc7cf7f53258a579dff3fc5c5cb2ca7d33ee6a7
SHA512

b35d31ae0c948fbf957b6e68cf63c2036dac9d3e853fac234f77974bf0c84af324fae07ff4875eb01ce3607fa1cb7bd77b2d74916abe85fc40dab4a0f4a273f6
SSDEEP

1536:Fe85bpBIhIn6tlx8tUXM++LZOwhy0qbwPr7rd3bt6ZYOEhPDZoC2RNIAjhqY0F:Fe85bpBImnqxVCL2wvrZbt/9dDZobjw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
131043ee35b9c09aed33995b78794ae8_JaffaCakes118

Files

131043ee35b9c09aed33995b78794ae8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0ae3d441cbc3b7e8900601a4524d0411

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

FrameRect

gdi32

SetDCBrushColor
SelectObject

ole32

StringFromIID
IIDFromString

comctl32

ImageList_LoadImageA

Exports

Exports

rqPHjiyie

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ