JaffaCakes118_7c09bdf217ad8e8977e85c494557a9c33f56e7238e4592167c4640dcb20d32df | Triage

Sharing

General

Target

JaffaCakes118_7c09bdf217ad8e8977e85c494557a9c33f56e7238e4592167c4640dcb20d32df
Size

1.7MB
MD5

6f4076a9ef5f6538a711503d2a65bd70
SHA1

5fea5a3b3ee068096e5e9745b74c97ceef6f550f
SHA256

7c09bdf217ad8e8977e85c494557a9c33f56e7238e4592167c4640dcb20d32df
SHA512

9fd7cec7bf6b4bb592796cbc5e44a56b49bd4f1a3902257471bcbb07adf7749804038b0392bfc6d1eaf4697634bb907e88701990a71a132f1ca4a0dd29edf5b4
SSDEEP

1536:sjkUHInOKVU9vFhgD6wK1LhsfAWs/g9UhwtV/IeQ/HQljEqt:sjFiDgL+C/3hwXfuwJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7c09bdf217ad8e8977e85c494557a9c33f56e7238e4592167c4640dcb20d32df

Files

JaffaCakes118_7c09bdf217ad8e8977e85c494557a9c33f56e7238e4592167c4640dcb20d32df
.dll windows:6 windows x86 arch:x86

c131e7ab95b6cc6ff4c2379d5b0fc4ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
CreateFileA
InitializeCriticalSection
WaitForMultipleObjects
GetLastError
WideCharToMultiByte
EnterCriticalSection
GetProcAddress
LoadLibraryA

user32

GetWindowThreadProcessId
PostThreadMessageW
SetTimer
CreateWindowExW
PostMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ