553e7f3bf1d8ecfcc7a6a96f6d75bbf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

553e7f3bf1d8ecfcc7a6a96f6d75bbf2_JaffaCakes118
Size

13KB
MD5

553e7f3bf1d8ecfcc7a6a96f6d75bbf2
SHA1

66c07d05e000488ca126a4a578900c8a1bf605fc
SHA256

81a3eee7d19d3c53f6e98eb8584feecbdc62d0df5c3b9789eeeb00a21bf6528d
SHA512

3bd092600930be3ffd21314b1eee73027366c87cc0fb627689fdeea70844fcfb58015177442ae7720ffe2601a2ba0cbcee911d985922a101f78200861e8b3fda
SSDEEP

192:pJyRps5tzGzlEfnwpjV/X1fjMOPZtMGUTP4xbCaoea8SaF7GSE3EVqiZ7Wij:GgWlCnwpV/dMOrMGU0hCaoeZSaxo3Ed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
553e7f3bf1d8ecfcc7a6a96f6d75bbf2_JaffaCakes118

Files

553e7f3bf1d8ecfcc7a6a96f6d75bbf2_JaffaCakes118
.dll windows:1 windows x86 arch:x86

9273a2d64d4e4b1652172f56edd38bb3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.code
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ