c69b980014cf0c582d005ce21f97050a_JaffaCakes118 | Triage

Sharing

General

Target

c69b980014cf0c582d005ce21f97050a_JaffaCakes118
Size

76KB
MD5

c69b980014cf0c582d005ce21f97050a
SHA1

bc2ec80a90353c4964572c98073c6568da040e40
SHA256

aad6c9de017d5c4c8790d3af4c490805816f9bc44c57b85552ed823e0ed289db
SHA512

317b5a0b0940bcc7ab45760ca282723d433dd739f0f015a4bcfb6b57c4a979ab35e91338f85b26a1ef03549d689ec96e1c5b59eca96d7466cf2dc2da87de03fd
SSDEEP

1536:B08ycVb3jZUVVS4DgzeZqJvhmjK5ZxMbngWYpaA9HAhWoICEWMPo:5ycV4ieZq1kjKrxMrctghrIlWMg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c69b980014cf0c582d005ce21f97050a_JaffaCakes118

Files

c69b980014cf0c582d005ce21f97050a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f9f638aaf9a6bedbfdf93ac6f4984867

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

CryptDestroyKey

msvcrt

abs

user32

GetFocus

kernel32

LoadLibraryA

Exports

Exports

��ainPressA@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainPressK@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainPressR@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainPressW@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainWordA@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainWordW@777GPAUHINSTANCE__@@U_COMMPROP@@~F

Sections

.bhgj
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uni
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ansi
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ