14f00886fe3e0a4189b18d80696c1a70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14f00886fe3e0a4189b18d80696c1a70_JaffaCakes118
Size

145KB
MD5

14f00886fe3e0a4189b18d80696c1a70
SHA1

26ad47b98e2583e565a9c1b29381a5e6518dc00a
SHA256

b32efb32e05b875d8ea9e243d627525ea456aff4245f500721aae879e3c149ad
SHA512

f049b58b82c81129e2adaa7e1ab1c969e794fc39050f94579fbf298d4cb40d1919d4550cacc70451ccd35630147db281c972cb9bfe984464d64203ab1bd27476
SSDEEP

3072:AliRTwDO61cEgn8hRD4HXWY/CyDqzdkWGqzjTT6Pi:MPO61sn0D4HXWpy2Z1GqzT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f00886fe3e0a4189b18d80696c1a70_JaffaCakes118

Files

14f00886fe3e0a4189b18d80696c1a70_JaffaCakes118
.dll windows:5 windows x86 arch:x86

27d9873ed1d7dfe0ab8d14c241468cdc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetProcAddress
GetVersionExA
LoadLibraryA
GetFileAttributesA
UnhandledExceptionFilter
lstrlenW
VirtualAllocEx
GetStartupInfoW
FreeLibrary
ReleaseMutex
CloseHandle

user32

LoadCursorW
LoadIconA
SetForegroundWindow
SendMessageTimeoutA
LoadStringA
GetWindowThreadProcessId
MessageBoxA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

shlwapi

SHGetValueA
PathRemoveFileSpecA
StrCmpIW
StrStrIA
SHSetValueA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ