3e2dbe82b10644b8b3182b30bf1037c7_JaffaCakes118 | Triage

Sharing

General

Target

3e2dbe82b10644b8b3182b30bf1037c7_JaffaCakes118
Size

240KB
MD5

3e2dbe82b10644b8b3182b30bf1037c7
SHA1

a39e74b94de9315f8a044fb7b9f51c6e5314f448
SHA256

26b5cc9b1511b22eabc064dd1b7f3263d2d64395f33908b706f493032e1ac4f7
SHA512

6a828a7299dcdec2c7a1411856ebe4979f9a207b8dee63bc9935924a159d4e13eaad4c5a4726aa896944e827c6a9e144d700804267f5259501d37b0fd163fdca
SSDEEP

3072:B8bpmMoKGW/TspUc13jN400urbwqw9oR9arFrqI9FU2b:DqTo13x407rbbz7ahv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2dbe82b10644b8b3182b30bf1037c7_JaffaCakes118

Files

3e2dbe82b10644b8b3182b30bf1037c7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

97c3b0f5209281801bb890d84512a307

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetDlgItem
SendMessageW
GetParent
ReleaseDC
GetDlgItemTextA
DrawTextW
DrawEdge
DrawFrameControl
FillRect
GetLastInputInfo
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

hUrCZRYyt

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ