2c11466f493274c4c562b0df2d6861e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c11466f493274c4c562b0df2d6861e9_JaffaCakes118
Size

162KB
MD5

2c11466f493274c4c562b0df2d6861e9
SHA1

db36ed432e61077b5106b3942d1ed4be5faac360
SHA256

3cca72bdb622c11ce6f26793eb7fdbdef8e36bc00d2bab960ec943c3b1cb0310
SHA512

d5e716eaf9b82ce88ecd02da08fee3556f22bfd8aa3976b18d603eeb91175c0115478294c3b12470171a71c5cf6020ef909665883896f392888d53d308a563dc
SSDEEP

3072:zgnQCLKVelfGCFyNsA1r9zbrPA8LRsvUCC:z0QCLKgltWsmbrPZLRsvUCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c11466f493274c4c562b0df2d6861e9_JaffaCakes118

Files

2c11466f493274c4c562b0df2d6861e9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

038c36deb82b3541977b369db55028ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CheckMenuItem
IsDlgButtonChecked
GetWindowRect
DestroyMenu
LoadBitmapW
GetSysColor
CheckMenuRadioItem
MsgWaitForMultipleObjectsEx
DrawMenuBar
MoveWindow
WinHelpW
GetSysColorBrush
LoadStringA

version

GetFileVersionInfoA

Exports

Exports

GetXoBAuerRuXX

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ