JaffaCakes118_263a256cd96653e3ca6c881da0bc77f509f353ec02996dc0bab8e2b63bc170bb | Triage

Sharing

General

Target

JaffaCakes118_263a256cd96653e3ca6c881da0bc77f509f353ec02996dc0bab8e2b63bc170bb
Size

1.8MB
MD5

21b105db26723e021de892ec74314edb
SHA1

2e9fd12d2f7482a5337683aa2b55dca41662a660
SHA256

263a256cd96653e3ca6c881da0bc77f509f353ec02996dc0bab8e2b63bc170bb
SHA512

7c6d948584cdf0f73bd624cc2abe68e9dc4d4a898dc268d15b42c8b78730720c40af301898647ed2a04908ceacf1d8d2ab9383a747eb7a4ba78ed8869695b719
SSDEEP

1536:0BOA0qKzBmromPgBqLxBqy5ZehAcITbk1fPeWnOCl/JPL48XpHv:0cFqKzBrtwq+ZPTbgmWnBJ4oVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_263a256cd96653e3ca6c881da0bc77f509f353ec02996dc0bab8e2b63bc170bb

Files

JaffaCakes118_263a256cd96653e3ca6c881da0bc77f509f353ec02996dc0bab8e2b63bc170bb
.dll windows:6 windows x86 arch:x86

9cd66df553e97137737f52df6fc68e39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
InitializeCriticalSection
WaitForMultipleObjects
WideCharToMultiByte
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
GetLastError
LeaveCriticalSection
LoadLibraryA
GetProcAddress

user32

SetTimer
PostThreadMessageW
GetWindowThreadProcessId
CreateWindowExW
PostMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ