529bafb55f0a7f22a05bf23af6c3fd30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

529bafb55f0a7f22a05bf23af6c3fd30_JaffaCakes118
Size

203KB
MD5

529bafb55f0a7f22a05bf23af6c3fd30
SHA1

fcd4ebfc216f28b304ab580691596e764c5028fe
SHA256

53f35fb0eaef09516ac54508c00066eb091195623ba97db48c3bd6ad973191f6
SHA512

3a85d375a3e7b45516480833ae7dd796e8b434b0b3f97f47224ba3b306b1e4b78610f0bb43a2b326f23710bd617ea65775e9a49d9f23012e29646d6cbc0804a6
SSDEEP

3072:5HpqADUUBWCGOORumqmdLrhE62k47zWoV2ts:5JtRo7OORumqmdLrh9sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
529bafb55f0a7f22a05bf23af6c3fd30_JaffaCakes118

Files

529bafb55f0a7f22a05bf23af6c3fd30_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a3d8fadc77a22f45a55bdf197f592817

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLogicalDriveStringsA
MultiByteToWideChar
GetLastError
GetProcessHeap
EndUpdateResourceA
InterlockedCompareExchange

Exports

Exports

IconCodec
IconDebuggerSnapshot
IconParameterOpen
IconSystemPython
IconWidget
IconWindowJava
IconWizard

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ