440f31930a27f9d2c98bf7f5e094d1fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

440f31930a27f9d2c98bf7f5e094d1fc_JaffaCakes118
Size

120KB
MD5

440f31930a27f9d2c98bf7f5e094d1fc
SHA1

0b3799fc9e887b52d85fae59b8b3d68cccd136d8
SHA256

9fe2c61e5faaac061c58facefeafb8d61118b5e086173002800a9c37d2ba4e50
SHA512

bafda9ecad8eedd5af5f9883b9a6860c0f94d519ed4b80b00c1acdf289325183914edb86c1e98c29aa0c10399343f6ffb56babfd5ae24746c36352bc8f1e834b
SSDEEP

1536:iGpOujjNFxUpEbnWRtKexbWDtE1Fnw7QH++vqRrN0/IvNMK6yz:dpTjjxUpQWCeWDtE47QH+7RrbvVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
440f31930a27f9d2c98bf7f5e094d1fc_JaffaCakes118

Files

440f31930a27f9d2c98bf7f5e094d1fc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0af1693d905a1171dd1f934a6480fde1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessIoCounters
GetCommandLineW
GetConsoleWindow
SetConsoleIcon
ReleaseSemaphore
GetCurrentProcess
ProcessIdToSessionId
GetTempPathA
ExitProcess
WriteProfileStringA
GetNamedPipeHandleStateA
GetPrivateProfileSectionNamesW
VirtualAllocEx
ClearCommError

user32

TranslateAcceleratorA
CheckMenuRadioItem
SetLayeredWindowAttributes
GetDCEx
DefWindowProcA
InvalidateRgn
GetInternalWindowPos
ClientThreadSetup
LockWindowUpdate
EnumClipboardFormats
AppendMenuA

gdi32

GetRasterizerCaps

Sections

.text
Size: 108KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textbbs
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ