JaffaCakes118_406488e362a1d87a71f75474a2181f9c029874455bc24f58f524487474345d2a | Triage

Sharing

General

Target

JaffaCakes118_406488e362a1d87a71f75474a2181f9c029874455bc24f58f524487474345d2a
Size

1.7MB
MD5

2c3f17043ab8708b01f3b890d5d9a485
SHA1

1f80199c13a6346a08b6b77bfec7746d6f536db4
SHA256

406488e362a1d87a71f75474a2181f9c029874455bc24f58f524487474345d2a
SHA512

857860dcb60e5e76f136c876e805d5f4cec7989c076acc5cb15b90898b7bb1d4f315dfa2387430940b781711a71ddf2974497d3195632becfe29edd3a6edae69
SSDEEP

6144:QshRn0xQiS1bHKVLk6cAw3nLbg2K3i9QMGeuJIbOjlvJ+XWeR6eS4P4BSMY8qkPa:nhRnh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_406488e362a1d87a71f75474a2181f9c029874455bc24f58f524487474345d2a

Files

JaffaCakes118_406488e362a1d87a71f75474a2181f9c029874455bc24f58f524487474345d2a
.dll windows:6 windows x86 arch:x86

1fa671711f279705d6bd2c8cc8ae7b82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjects
WaitForSingleObject
GetLastError
InitializeCriticalSection
WideCharToMultiByte
CreateFileA
LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA

user32

SetTimer
PostMessageW
GetWindowThreadProcessId
CreateWindowExW
PostThreadMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ