38f2d9eeaaf39ba39c190aac9f19638d_JaffaCakes118 | Triage

Sharing

General

Target

38f2d9eeaaf39ba39c190aac9f19638d_JaffaCakes118
Size

84KB
MD5

38f2d9eeaaf39ba39c190aac9f19638d
SHA1

94364ac53913696e0e4e2ff6468c0ce84f027352
SHA256

bb23ee39fcfb790db72c0178270cbafd0f239aafac479375868f2f87da6be7a9
SHA512

f60ccc03a1045b55ae2e9c0335687ed29ec8c6a46f2bbccfc093f49aec03db44d8183f55d820aa9eba7e32f1e588e811f3792c2f4bf77e5155753a1b250d0b81
SSDEEP

1536:G92os+rmWT7jWDIXuSR0T2QSsVRqTDyPWq+nV2YAfcVixY7:Ip7jQSaTRSeeWWqodA0Vf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38f2d9eeaaf39ba39c190aac9f19638d_JaffaCakes118

Files

38f2d9eeaaf39ba39c190aac9f19638d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5058fae5c67a0f743aaa34f3b0d04750

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEndOfFile
GetCalendarInfoW
GetModuleFileNameW
LoadLibraryA
TransactNamedPipe
GetTempPathA
LCMapStringA
CreateMailslotA
ReadDirectoryChangesW
GetProcAddress

user32

UpdateLayeredWindow
DeferWindowPos

advapi32

RegisterServiceCtrlHandlerA
OpenSCManagerA
StartServiceW

shell32

ShellExecuteExW

gdi32

EnumFontFamiliesExA
GetTextExtentPointW
PaintRgn
GetTextFaceA
GetCharWidthW

Exports

Exports

CPlApplet

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ