44bba9cd83ec0be4a1b6f9b677b0dc6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44bba9cd83ec0be4a1b6f9b677b0dc6b_JaffaCakes118
Size

12KB
MD5

44bba9cd83ec0be4a1b6f9b677b0dc6b
SHA1

691e2063e5a75bc9895c26ad607bba117db2216d
SHA256

aa20707e467be43e9e02e648ca3f6a359d4278f42a0a8d148ca5011bdc16b62d
SHA512

7c840daa064d0733ebfaa18502661d97ac7e17f5526d353ebde64269242e945fa94fd48708838e5c556fe496539b8287a053983a2fb245aae0b92d057d1a55d5
SSDEEP

192:9U5qVDsz47mrhha4Mh4RgKvT+lvxFwvjvx4UlMWdE6rdNH:9U5qVQz4aL9MORCvHw7v83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44bba9cd83ec0be4a1b6f9b677b0dc6b_JaffaCakes118

Files

44bba9cd83ec0be4a1b6f9b677b0dc6b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c06e5cd3bd5e15e58ea852b0fd4e9ddd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
MulDiv
GetModuleHandleA
lstrcpyA

user32

UnregisterHotKey
SetWindowLongA
SetCapture
SendMessageA
ReleaseCapture
PostMessageA
LoadBitmapA
GetSysColor
GetDC
CreateWindowExA
CallWindowProcA
wsprintfA
RegisterHotKey

shell32

DragQueryFileA
DragFinish
DragAcceptFiles

comctl32

ord17
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
ImageList_Add

gdi32

CreateFontA
DeleteObject
GetDeviceCaps
TranslateCharsetInfo

Exports

Exports

GetNewInf

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ