41c90ab3cc37dc9f0060960d97ef4a42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41c90ab3cc37dc9f0060960d97ef4a42_JaffaCakes118
Size

249KB
MD5

41c90ab3cc37dc9f0060960d97ef4a42
SHA1

918e84ecac1c49391c2768057c8484c164e9f923
SHA256

ddca2fac3c631adb6145e4fc83124b077fa15d2c7f26d65ee2cec6f8e82142bc
SHA512

5d66a05edeb782825b6cba4bd3bac4598ba10c870d38b285ca6b1a9dc23990836b210ccffe9332776bebe0e4bad0f97f8c43320c32d6798b8c785f0fc1c1c28f
SSDEEP

3072:LypmMoKGWunhATmKH3rim09M4dUe8LrqI9FU2b:7Nn+/7iPM4d9ohv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41c90ab3cc37dc9f0060960d97ef4a42_JaffaCakes118

Files

41c90ab3cc37dc9f0060960d97ef4a42_JaffaCakes118
.dll windows:4 windows x86 arch:x86

02d76c393feb8d385167a85a006ffd29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetParent
ReleaseDC
DrawTextW
DrawFrameControl
FillRect
IsRectEmpty
GetClientRect
DestroyWindow
SetWindowPos
ShowWindow
IsWindowVisible
IsIconic
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

wqQOXieeC

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ