3c5e0246814cf25973c174cff55f3b6d_JaffaCakes118 | Triage

Sharing

General

Target

3c5e0246814cf25973c174cff55f3b6d_JaffaCakes118
Size

132KB
MD5

3c5e0246814cf25973c174cff55f3b6d
SHA1

8902e9951dce2593a324b95bbd90a59a7cc16411
SHA256

ef5e91372c7279fa772efe1a5e65301083e75725333ac144b7d402b1a2ec67ca
SHA512

a526dce028b75607db1e82936ff32075e80716bf88756c85bcf4dfbee82dc62dfa564258430ed4be15e7a0a5e3a45d549988a4b93c8ad40b219b4654b5cdd009
SSDEEP

1536:dMO/IjuqUPDWmyBOoF1DG2hvQNm/kF9C3+Iulz9oNUwSc+RQcYAjHi9N3d/eVpGk:qazPVoF1vWfIu9cUwS4miTEGkBS1zA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c5e0246814cf25973c174cff55f3b6d_JaffaCakes118

Files

3c5e0246814cf25973c174cff55f3b6d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fd4fbff25564df8cb721b12915701379

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapCreate
HeapSize
LCMapStringA
SetEvent
CreateFileA

msvcrt

__p__commode
__set_app_type
_cexit
srand
sscanf
strspn
time
_XcptFilter

user32

DrawIconEx
GetClassNameA
GetSubMenu
GetSystemMetrics
GetWindowPlacement
OffsetRect
TrackPopupMenuEx
TranslateMessage
DefMDIChildProcA
RedrawWindow

oleaut32

SafeArrayDestroy
SetErrorInfo
SysFreeString
SysReAllocString
SysStringLen
VarBstrCmp
RegisterTypeLi

shlwapi

PathBuildRootA
PathAppendA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA
SHQueryInfoKeyA
StrSpnA
StrStrIA
StrToIntA
SHDeleteEmptyKeyA

Sections

.text
Size: 66KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ