181945f6abe285ec0df118a055d46083_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

181945f6abe285ec0df118a055d46083_JaffaCakes118
Size

210KB
MD5

181945f6abe285ec0df118a055d46083
SHA1

ebf7ca393be9d2f479ea19fae435ded5daa8c10c
SHA256

631468c23bef42b674d0c4a2b3e7eaffc720fef51f34eca7d3fd9cd30829af5f
SHA512

75d25172743a31f380f8e06e1e065f2eb505c6752735e59f94a2cac6d52ff51e78f9ff11efbc320a932aa0fb45bb0c8d7196bab2389ac94f76ed0e360da6f059
SSDEEP

3072:O8bpmMoKGW/TspUc13jN400urbwqw9oR9arFrqI9FU2bw:UqTo13x407rbbz7ahvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
181945f6abe285ec0df118a055d46083_JaffaCakes118

Files

181945f6abe285ec0df118a055d46083_JaffaCakes118
.dll windows:4 windows x86 arch:x86

97c3b0f5209281801bb890d84512a307

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetDlgItem
SendMessageW
GetParent
ReleaseDC
GetDlgItemTextA
DrawTextW
DrawEdge
DrawFrameControl
FillRect
GetLastInputInfo
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

hUrCZRYyt

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ