41697d230aa28144e0aba3e932b05ba5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41697d230aa28144e0aba3e932b05ba5_JaffaCakes118
Size

363KB
MD5

41697d230aa28144e0aba3e932b05ba5
SHA1

17655f517e6d115187412a58d3acc092f93e39d0
SHA256

e06007fd1c3deb78000a4588cb6e1134447190fbe2ce8426649b4e86f1dbb5a5
SHA512

6e41e82745fa89206f23f34974c9608213b8984f496ef16f138420e839011e135def46b437aa5945ebc688976f00e6fa7930844abfc33e36c7e159d091fb6d1e
SSDEEP

6144:rErlF7A9AI5mryrX0GDdeE6EIqqvgH2PxjXG2xv6h55b:GlFor5muYGdeEfFEgHSgR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41697d230aa28144e0aba3e932b05ba5_JaffaCakes118

Files

41697d230aa28144e0aba3e932b05ba5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

11ccdeb4216bb1334891363787100ba3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DispatchMessageA
DestroyIcon
DestroyCursor
CreatePopupMenu
CreateCursor
CopyImage
ActivateKeyboardLayout

kernel32

GetSystemTime
lstrlenA
lstrcpynA
lstrcmpA
VirtualFree
UnmapViewOfFile
TlsGetValue
TlsAlloc
EnterCriticalSection
EnumResourceTypesA
ExitProcess
ExitThread
FindResourceA
FlushFileBuffers
GetDateFormatA
GetLocalTime
GetStartupInfoA
GetTimeFormatA
GetVersionExA
LoadResource
MapViewOfFile
OpenFile
OpenFileMappingA
SetCurrentDirectoryA
SetEndOfFile

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE