29857225d359bffdf1a92e243479af78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29857225d359bffdf1a92e243479af78_JaffaCakes118
Size

58KB
MD5

29857225d359bffdf1a92e243479af78
SHA1

65b273191e7b84224ea23a09b1e51f97fb8d7a63
SHA256

dba790c02baa12274181401b333108c7c2e81811c4a30c0dce457bb13184292f
SHA512

3337b6dad83b16358a6013c8de21bf8c19e84b6684a168241d433bb18a73ae6d09a779384a3e00d408d29982cb9daee72aa46e9f1247d3ec890d52a6727c9a62
SSDEEP

1536:PC0cK2Mj0hWh5XgC/I62oCIRTWY6S5PWc255io:PllNj0tIIRGRTWY2p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29857225d359bffdf1a92e243479af78_JaffaCakes118

Files

29857225d359bffdf1a92e243479af78_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d2b6c1771fa2ee4fd3ecb80fd296c00a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DestroyMenu
CreateMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateIcon
CreateDesktopA
CreateCursor
CloseWindow
CharToOemBuffA
CharNextA
ChangeMenuA
BeginPaint
ActivateKeyboardLayout

kernel32

GetCommandLineA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
WriteFile
TlsFree
SetEndOfFile
RtlUnwind
LocalAlloc
LeaveCriticalSection
GetVersion
GetTimeFormatA
GetSystemTimeAsFileTime
CompareStringA
FlushFileBuffers
FreeResource
GetModuleHandleA
GetSystemTime

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE