29c9242a8f5d08ead18976eaddb1456f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29c9242a8f5d08ead18976eaddb1456f_JaffaCakes118
Size

183KB
MD5

29c9242a8f5d08ead18976eaddb1456f
SHA1

e737337dc83cb30714b2498961cd33d8d22e1aea
SHA256

97d027624c51fea63d2af7cb07e69187d4d0d0292c8394417a51d570891da91c
SHA512

1a15cdaf8a169427ed83996770b396c9e36415e8354a3bf0de7ee987e007bb0d9c5701179a91229cbc2b807eb50fa36d3a8cbb2530763312020920e143174fb9
SSDEEP

3072:KNBfhFyOIpmMoKGWJZt8o2i4O7uxsIm1Orz2dKeG:KNBfhBMZL2HOKxjmUz2dl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c9242a8f5d08ead18976eaddb1456f_JaffaCakes118

Files

29c9242a8f5d08ead18976eaddb1456f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a56d37aa29949a90d46e5397ded713f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
ScreenToClient
GetSysColor
GetDlgItem
SendMessageW
GetParent
ReleaseDC
GetDC
SetDlgItemTextA
GetDlgItemTextA
DrawTextW
DrawEdge
DrawFrameControl
FillRect
GetKeyboardType

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoCreateGuid

Exports

Exports

ODXeuBioJ

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ