459e0e0bb90e5d9cc4f8a93a1c255bcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

459e0e0bb90e5d9cc4f8a93a1c255bcb_JaffaCakes118
Size

176KB
MD5

459e0e0bb90e5d9cc4f8a93a1c255bcb
SHA1

26f9a19e9c9432bd48b91ee847925300e1151710
SHA256

a1f7d8125a658255603c1c3ff34aff012ec12b58d502311f45af2335ca2e81c9
SHA512

df95f35d39f3d80cf9d84f88e4b3e0571368539fd47011e07de89f69600e789aeed32dd63ed756a965383a34a709795f027cf3dd7afeae343005298887a99bd7
SSDEEP

3072:tAO4TXm8qF0j0MGWTp2Iymnti8uPJ+KYkhq6bJEEfZ8vmivoX+I0+ukDCndF7OHq:ET3qF09/nU8uPJ+KLqJEXaoPLQdNYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
459e0e0bb90e5d9cc4f8a93a1c255bcb_JaffaCakes118

Files

459e0e0bb90e5d9cc4f8a93a1c255bcb_JaffaCakes118
.dll windows:5 windows x86 arch:x86

0bca8d0f1f10c87b5b0d945ae61e1c04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

VkKeyScanA
IsCharLowerA
GetForegroundWindow

kernel32

GetProcessHeap

Exports

Exports

?BinaryFunction@@YG_KPAUHBITMAP__@@PAU_PSP@@@Z

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.faxi
Size: 512B - Virtual size: 413B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fixe
Size: 512B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.form
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.fold
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ