42765ff2fd58bcf53a975efb9184b4e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42765ff2fd58bcf53a975efb9184b4e9_JaffaCakes118
Size

247KB
MD5

42765ff2fd58bcf53a975efb9184b4e9
SHA1

337c13580d15da505be414917b2c35bdbd568caa
SHA256

e27fab4c25e685309582fc015b0e96d2f2e4f80c353a7b93b3cb898d3c1f01d6
SHA512

bb0dbea693972b55a6c50c443e7f37afad2fd954c5252468ee37bb5b2b7ec5ea9f78028ca3bc99012ccd602f532b482b88642ed2caec7fb4ee2570a551bf113a
SSDEEP

3072:OypmMoKGWunhATmKH3rim09M4dUe8LrqI9FU2b:qNn+/7iPM4d9ohv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42765ff2fd58bcf53a975efb9184b4e9_JaffaCakes118

Files

42765ff2fd58bcf53a975efb9184b4e9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

02d76c393feb8d385167a85a006ffd29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetParent
ReleaseDC
DrawTextW
DrawFrameControl
FillRect
IsRectEmpty
GetClientRect
DestroyWindow
SetWindowPos
ShowWindow
IsWindowVisible
IsIconic
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

wqQOXieeC

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ