55fe684f892bdda79ac853f95767ac70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55fe684f892bdda79ac853f95767ac70_JaffaCakes118
Size

133KB
MD5

55fe684f892bdda79ac853f95767ac70
SHA1

889b6b6f5844f8c7ef19e6df9ab914bb9e1d98be
SHA256

42155587d0cc94e0f131be0cc5728db0fa2afb0826a7b2ace302be7de8e1a327
SHA512

fe18ae7c7a8edcb3b471a30bfbf8b4b90250d22f2f49bf7c26ba6a7173c6ed7b4856f11836bde7705ada4b044180ff636c19053b17a942585fe6d238a5a880e6
SSDEEP

3072:RWF1xkq4TkjBhv/Hgr4rgkpfq4JSe7gCBku+C2bG9AN:Rgxl44tBnrhpCodfBkH8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55fe684f892bdda79ac853f95767ac70_JaffaCakes118

Files

55fe684f892bdda79ac853f95767ac70_JaffaCakes118
.dll windows:4 windows x86 arch:x86

238fc944d1e333e45835435445847258

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassA
SendMessageA
UpdateWindow
SubtractRect
SetTimer
SetFocus
ScrollDC
CreateCursor
MoveWindow
MessageBoxA
IsChild
HideCaret
GetUpdateRect
SetCaretBlinkTime
GetCaretBlinkTime
CreateCaret
CreateWindowExA
DestroyCaret
DestroyCursor
DrawCaption
DrawTextA
GetClassNameA
OemToCharA
GetMenuInfo

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseFontA

advapi32

DeleteService
GetAclInformation
IsTokenRestricted

Exports

Exports

FuncProc

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ