3ffbc214288c865fff10f9f738ff1fa6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ffbc214288c865fff10f9f738ff1fa6_JaffaCakes118
Size

268KB
MD5

3ffbc214288c865fff10f9f738ff1fa6
SHA1

fc1a7165415daea0c3b7742ea32ba13788c9e5b2
SHA256

7f7776bf080031e5f9efd47718d421ad67be308f8622df147ec8c13b475537ac
SHA512

420dd18b5d4a134ced4ef77f67304fc0f354d59b2f37364363106705bdfc8fa194f11d99d1e233c9bf2a437822ce871ca9b531bace5f2cdef7c427022ab0fa85
SSDEEP

3072:cxgm/X7ggrIzhwXk4N8XisdSYvw1gOBodZ3lQTEPY/cCxs1Lq:Lngrj0LXiwnvxOyZ1BP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ffbc214288c865fff10f9f738ff1fa6_JaffaCakes118

Files

3ffbc214288c865fff10f9f738ff1fa6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2a6eb63ec16f94d6526332a38c2c1450

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReplaceFileA
GetLocaleInfoW
GetLastError
FindAtomW

comdlg32

ChooseColorA

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetDesktopFolder

oleaut32

VariantInit
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SysReAllocStringLen
SafeArrayUnaccessData

comctl32

ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Draw
ImageList_DrawEx
ImageList_SetIconSize
ImageList_Read
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Create

Exports

Exports

CohioKuui

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ