43a028dc83b4d23d36f4af1c964fa4a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43a028dc83b4d23d36f4af1c964fa4a7_JaffaCakes118
Size

83KB
MD5

43a028dc83b4d23d36f4af1c964fa4a7
SHA1

c34f5d8b819bb569e1d61d209b7a9554ee3492cc
SHA256

c17c36130e1aecc81b88c1d32db541487cf458efd8a5b9e5b426095e33da05ea
SHA512

59257ae932348c6c7e2df36df7e967ca6f96317e38605976cfaa6264e7b425066537d5ef600dc45db3a84c9041101a0d86b6ae36571ed8eeb902124d9e34fe65
SSDEEP

1536:Gss+HSiKnICDIejTeEHWjptfiOP26RVjNLK7TrQ6rGLc7fDR:5HSXDIe2EHwP3RuDELcjt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a028dc83b4d23d36f4af1c964fa4a7_JaffaCakes118

Files

43a028dc83b4d23d36f4af1c964fa4a7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a789e7f37c314351eb5169a70a6bba21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsCharUpperA
EnableWindow
CreateMDIWindowA
CreateIconFromResource

kernel32

TlsAlloc
lstrcmpiA
VirtualAlloc
UnmapViewOfFile
TlsSetValue
CloseHandle
EnumResourceLanguagesW
EnumResourceTypesA
FreeResource
GetFileSize
GetLocalTime
LeaveCriticalSection
LoadResource
OpenFileMappingA
TlsGetValue

oleaut32

SafeArrayCreate
SetErrorInfo
SysReAllocString
SafeArrayAllocData
OleLoadPicture
RevokeActiveObject
SafeArrayAccessData

Sections

.text
Size: 16KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ