JaffaCakes118_0942961f1852b4815c6902de17f5d360557339a7b563ec48e8842b835c8e06be | Triage

Sharing

General

Target

JaffaCakes118_0942961f1852b4815c6902de17f5d360557339a7b563ec48e8842b835c8e06be
Size

1.8MB
MD5

7e6c0fb044be26b6ccffb659378912ec
SHA1

fbd4638b7bd93e6dcb3ca12cef7168ae5d9a1751
SHA256

0942961f1852b4815c6902de17f5d360557339a7b563ec48e8842b835c8e06be
SHA512

b85563f3930964a85b588c951d73d29bdd79fa4600b4dace64d4ea1a6f529ff5c2a15643d51c0c15e67f97de7ce3bd7513df96ea0e73be75bcb39bff88df4c9f
SSDEEP

1536:0BOA0qKzBmromPgBqLxBqy5ZehAcITbk1fPeWnOCl/JPL48XpHv:0cFqKzBrtwq+ZPTbgmWnBJ4oVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0942961f1852b4815c6902de17f5d360557339a7b563ec48e8842b835c8e06be

Files

JaffaCakes118_0942961f1852b4815c6902de17f5d360557339a7b563ec48e8842b835c8e06be
.dll windows:6 windows x86 arch:x86

9cd66df553e97137737f52df6fc68e39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
InitializeCriticalSection
WaitForMultipleObjects
WideCharToMultiByte
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
GetLastError
LeaveCriticalSection
LoadLibraryA
GetProcAddress

user32

SetTimer
PostThreadMessageW
GetWindowThreadProcessId
CreateWindowExW
PostMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ