2c623eba235834ce2b146990dede9db6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c623eba235834ce2b146990dede9db6_JaffaCakes118
Size

11KB
MD5

2c623eba235834ce2b146990dede9db6
SHA1

aa3f4ccffbcddeb4314e3513a5f28c5963a608ee
SHA256

dda85fcfa2a15d07a0d81c8e12e3de9217082304614b04b037edcc4ec79ed3be
SHA512

9ac7b8155f4a8e96fdf1bbc58727aa8f50d9b231995a19bfa60667823aa832e5453abc039b0da58b7b31e65328ef71e0f20b66996441f7eb294a182ef990da34
SSDEEP

192:ecyUZiG57HN4k0C/VvOaq1a1YBOCWF1zvFuhe3t/LLC5QwQ45s2dHCl:ecybo7HNUGvlx1YBOtzvoE9G5rJdHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c623eba235834ce2b146990dede9db6_JaffaCakes118

Files

2c623eba235834ce2b146990dede9db6_JaffaCakes118
.dll windows:5 windows x86 arch:x86

bd565320e338b89ca9a2b3e0f9d7350d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
HeapAlloc
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
WriteFile
Sleep
CreateProcessA
ReadFile
FindFirstFileA
FindClose
MoveFileA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetVersion
DeleteFileA
CreateThread

user32

GetWindowThreadProcessId
OemKeyScan
EnumChildWindows
GetDlgItem
GetWindowLongA
EnumWindows
CloseDesktop
GetClientRect
FindWindowExA
CreateDesktopA
GetClassNameA

Exports

Exports

_Main@0

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ