167c829237eda50ec1e3276738e3a44e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

167c829237eda50ec1e3276738e3a44e_JaffaCakes118
Size

84KB
MD5

167c829237eda50ec1e3276738e3a44e
SHA1

40a88547c6c7d0e61aff45c8e23c72f54d7cec80
SHA256

9a264122d9eb1c3befab0d5e1297607a08e7825a112c0aac6c6eaf12858e27e0
SHA512

6a27f62c53316bd71cd335bb434a18aa53a36a8690c6221643d7c105bcfa6636a2f820b1554fdbd190d4b4d83d9509d8dfca0ceaea198d387edaa48f10ed6db5
SSDEEP

1536:9FXqpqmCJzmnlzMrCEJ8u0uvKBV9rKfnK7JCJBvXv3X:9FaQPgVMunuxsGy7UTXvX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
167c829237eda50ec1e3276738e3a44e_JaffaCakes118

Files

167c829237eda50ec1e3276738e3a44e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a3d2158556702e4879b95777ef6218eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapCreate
GetCurrentDirectoryW
QueueUserAPC
GetProfileIntW
CreateWaitableTimerW
HeapCompact
GlobalFree
GetProcAddress
GetDefaultCommConfigW
SetCurrentDirectoryA
LoadLibraryA
CompareStringW

user32

SubtractRect
EnumChildWindows
CreateWindowExW
MessageBoxIndirectA
GetWindowTextA
GetUpdateRect
CopyImage
DestroyCursor
CharLowerA
TabbedTextOutW
SetWindowLongA

advapi32

QueryServiceConfigW
EnumDependentServicesW

gdi32

CreateFontIndirectW
GetStretchBltMode
DPtoLP
GetPaletteEntries
PolyBezier

Exports

Exports

SysMousexx

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ