2f2d9cda3a3cc7479bc6453cafd9ac1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f2d9cda3a3cc7479bc6453cafd9ac1b_JaffaCakes118
Size

12KB
MD5

2f2d9cda3a3cc7479bc6453cafd9ac1b
SHA1

9ca89bdfc54b64a439c8aca124647387b64a030b
SHA256

1e27313469f4b729545693d6e1222645fad16de878322ec52055318f77de5659
SHA512

1af1c690b6825dbb596bd30f2bddab37e17ff6b51925e7d31115f9ee5b3c9a7d43456e076f36ab7a87ac0670fa604b51c4b1a54b6f918bc920aa05ae9ac8f405
SSDEEP

192:ecm3ONmE57lNBg0ChOEOaq+8bbN7kkLT5FEnZUlAPJCjfkdo9oadRdH9dFm:ecEHi7lNX/ElWvNpT5a3YjGadRdH9dFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f2d9cda3a3cc7479bc6453cafd9ac1b_JaffaCakes118

Files

2f2d9cda3a3cc7479bc6453cafd9ac1b_JaffaCakes118
.dll windows:5 windows x86 arch:x86

bd565320e338b89ca9a2b3e0f9d7350d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
HeapAlloc
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
WriteFile
Sleep
CreateProcessA
ReadFile
FindFirstFileA
FindClose
MoveFileA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetVersion
DeleteFileA
CreateThread

user32

GetWindowThreadProcessId
OemKeyScan
EnumChildWindows
GetDlgItem
GetWindowLongA
EnumWindows
CloseDesktop
GetClientRect
FindWindowExA
CreateDesktopA
GetClassNameA

Exports

Exports

_Main@0

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ