29cd37d2d2563ee42c6893f3952451bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29cd37d2d2563ee42c6893f3952451bb_JaffaCakes118
Size

174KB
MD5

29cd37d2d2563ee42c6893f3952451bb
SHA1

60faa18f89cd53ebe62de96d5ce32cba5b9d3c72
SHA256

9b436f10eea20696b2cba85af800051d23ad7c5c0536c649765669fb30390e67
SHA512

53e607b9d110a3087c4b37dc3bd266c930f4d318299f6d9c2442a765df6a09cec53a73a2c7b0892f60c4daf51563e143057bd694d383ebfcfd77bb9e0ca79d24
SSDEEP

3072:1MD4mvHf8R/uQR1w8pv5SYV2TvImJaYi1m+gizoSEYLNtF2Zd:1Y4mUdR1wO5SGI3aY0hoSEmt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29cd37d2d2563ee42c6893f3952451bb_JaffaCakes118

Files

29cd37d2d2563ee42c6893f3952451bb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e085bf2139d36260bd12d78e0ae88a0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

GetTextAlign
SelectPalette
GetBkColor
RestoreDC
SetPixel

kernel32

VirtualAlloc
GetCurrentProcess
LocalReAlloc
ExitProcess
LocalFree

user32

InsertMenuItemA
IntersectRect
LoadBitmapA
GetSysColorBrush
IsWindowUnicode
GetWindowTextLengthA
InvalidateRect
OpenIcon
GetDC

shell32

SHGetDiskFreeSpaceA
SHGetDesktopFolder
Shell_NotifyIconW
DragQueryFileA

Exports

Exports

laCDfTQDml@24

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ