3b87114936ef83974d86deca9b548832_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b87114936ef83974d86deca9b548832_JaffaCakes118
Size

130KB
MD5

3b87114936ef83974d86deca9b548832
SHA1

c5bca2e5ebf54af343249a7869c4c9030002c57f
SHA256

7157658098ac3c7a3fae5c68394ff3b73e6a5c27833b02c2c5e3694786fe3afc
SHA512

df41a7874abcba5de704e37533074589b91f631f0f5b0c08435209ae5e80207c1394df35d2304d4240564549c1289a489fcd1f65799eea942613ba4c59a25d76
SSDEEP

1536:LzJ7wPZvThSudruthQC9lbk5ZoXAf9cuBD5QVZyfkP6SSL+aeg7LmNIAB:LhEvThSuM1k528coQ/ukPKwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b87114936ef83974d86deca9b548832_JaffaCakes118

Files

3b87114936ef83974d86deca9b548832_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d92281bcab6612565fd3f1a62ebd34ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

FrameRect

gdi32

SetDCBrushColor
GetStockObject
SelectObject

comctl32

ImageList_LoadImageA

shlwapi

PathStripPathW
PathIsURLA
PathParseIconLocationA

Exports

Exports

TwJihHPOD

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ