36871ffdfeff01f4411ccc387eeed163_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36871ffdfeff01f4411ccc387eeed163_JaffaCakes118
Size

108KB
MD5

36871ffdfeff01f4411ccc387eeed163
SHA1

9c719c3abac56007ce6730f5a97ce743c858bea4
SHA256

c17fa691088dd505cddce8fc511847d04db759d1a967771b0801c4380c7610db
SHA512

91ab14631e166b2d4d26f2ea6ce0c7407cc36970709a479f2b628c1ae0c8a4045c4b87cf63265d9df103633c46129663be14381527b86f023c6dec66865abac0
SSDEEP

1536:022zVpX4Qfe1hebpAlqJ5m1eeJ2lyppgG8Rnun8LXYIKVs:02En4Q8edA3og2lADwnun8LXY3Vs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36871ffdfeff01f4411ccc387eeed163_JaffaCakes118

Files

36871ffdfeff01f4411ccc387eeed163_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d92281bcab6612565fd3f1a62ebd34ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

FrameRect

gdi32

SetDCBrushColor
GetStockObject
SelectObject

comctl32

ImageList_LoadImageA

shlwapi

PathStripPathW
PathIsURLA
PathParseIconLocationA

Exports

Exports

FZiPOwrrY

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ