JaffaCakes118_4b0e50204999c44b9f7d7fa88aac013056c0e9fe63d88f37e1e7a3212a001a12

Sharing

Target

JaffaCakes118_4b0e50204999c44b9f7d7fa88aac013056c0e9fe63d88f37e1e7a3212a001a12
Size

421KB
MD5

635b2a3facba50cfcc5257cb1ae764c8
SHA1

8a55ab05ebb316fbc692cf6bc92810b7087e6367
SHA256

4b0e50204999c44b9f7d7fa88aac013056c0e9fe63d88f37e1e7a3212a001a12
SHA512

bf901c1ee5ba0b3330756e93d3eb611170b7f6b93cc62cc31768d714c95aa9f528556bd39a5e343b86bca8164ca3cfa2eceee2c462a267f6c5fe27fb3c9ecd9e
SSDEEP

6144:oNggYNDa2pSkvClhIuW+eShWcIAxuqetIP0XxgHcDlZh/bs/92kxPu4G2TV2nwt:oNpabgIuvpFeiP0XKvpx4AV2M

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/33667344.dll

JaffaCakes118_4b0e50204999c44b9f7d7fa88aac013056c0e9fe63d88f37e1e7a3212a001a12
.zip
33667344.dll
.dll windows:6 windows x64 arch:x64

a2dbe2dbdd4a618ca4f33e06c39b7b86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

TabbedTextOutW
TrackPopupMenu
RemoveMenu
CallWindowProcA
SendMessageCallbackW

gdi32

GetColorSpace
GetPath
CreateFontIndirectExA
GetObjectType
GetGlyphOutlineW
CreateDIBitmap
CreatePalette
EnumFontsW

shlwapi

StrDupW
StrToIntExW
StrCpyNW
StrRetToBufA
ord157
StrCSpnA

msvfw32

ICDecompress
DrawDibGetBuffer
GetOpenFileNamePreviewA
GetOpenFileNamePreviewW
ICInstall
ICCompress

Exports

Exports

AR2mgwpu
GTfruh
Hyuasbbjhas
KCQCJSqhP
Qd4KvioH
RuCMhkVyyvW
Wv1q0db
Zqr3ahIiS
eQkMyof1vtl
f3v3sP6N
i2xISu
jnPELv
n7iOlizF
nM4zPvJ
oGTYT90cmE
qERcNolXzd
qNRjv4q
urUW81SnK
yEWQvjHm
yehHRNbX
yhpwNn

Sections

.text
Size: 731KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INV87162.txt.lnk
.lnk
UFbjRkMGfw.ps1
.ps1
notice.txt