1409574c34a567bbaa2f4833f85c8fe6_JaffaCakes118 | Triage

Sharing

General

Target

1409574c34a567bbaa2f4833f85c8fe6_JaffaCakes118
Size

88KB
MD5

1409574c34a567bbaa2f4833f85c8fe6
SHA1

e8942fe7a17910bc63040f3953eb35545d1b7ef6
SHA256

797b037a1bdab34d3d6398c756e54b912574a678c797eb5ba84f2aa1d91e5869
SHA512

2fa1f14b092f8ccb6c09749b5ef9f06b81375ce440a32724089c74f7eea9d29b8e9c809c7f514b03e460a2e53a9dc4de893ae77257ea06e79d220a9fecf60bae
SSDEEP

1536:oqu0y4zN/x68hpyfJ1GGu503MRzeBCg8ttrLampc4Tx7s:oqxRNM8oJ1GB+38IC9pJTxI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1409574c34a567bbaa2f4833f85c8fe6_JaffaCakes118

Files

1409574c34a567bbaa2f4833f85c8fe6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e44aba67698c2aa5072979711125e698

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstChangeNotificationA
CreatePipe
SetVolumeLabelW
GetStartupInfoA
WaitCommEvent
GetProcAddress
GetBinaryTypeA
ResumeThread
GetCommProperties
MoveFileExA
EnumResourceLanguagesW
GetUserDefaultLangID
LoadLibraryA

user32

DrawAnimatedRects
HideCaret
SetRectEmpty
GetWindowTextLengthW
CharNextW
GetWindowTextW
WindowFromDC

advapi32

SaferGetLevelInformation
RegOpenKeyExW
RegConnectRegistryW

gdi32

SetDIBits
CreatePen
SwapBuffers
SetBrushOrgEx
AbortPath
GetNearestColor
CreateFontA

Exports

Exports

CRLWebplugin

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ