JaffaCakes118_5ce2514f5ed70c19c98afc0c960018306d73835708f6142d362754a2f1b1c12a | Triage

Sharing

General

Target

JaffaCakes118_5ce2514f5ed70c19c98afc0c960018306d73835708f6142d362754a2f1b1c12a
Size

1.7MB
MD5

5eda0f8ce382199aff226357797ddd53
SHA1

8171d60a477b57fadedc3fefca9c9b04ad8432d1
SHA256

5ce2514f5ed70c19c98afc0c960018306d73835708f6142d362754a2f1b1c12a
SHA512

676ad1a5e9f7aaf0450decaa7c77dfbe1ba06356473274b8aae148ef976bd61ffa53291818c78c08d26d5d3273c7f91e6c9162b558fbf492767e6a001fae067c
SSDEEP

1536:sjkUHInOKVU9vFhgD6wK1LhsfAWs/g9UhwtV/IeQ/HQljEqt:sjFiDgL+C/3hwXfuwJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_5ce2514f5ed70c19c98afc0c960018306d73835708f6142d362754a2f1b1c12a

Files

JaffaCakes118_5ce2514f5ed70c19c98afc0c960018306d73835708f6142d362754a2f1b1c12a
.dll windows:6 windows x86 arch:x86

c131e7ab95b6cc6ff4c2379d5b0fc4ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
CreateFileA
InitializeCriticalSection
WaitForMultipleObjects
GetLastError
WideCharToMultiByte
EnterCriticalSection
GetProcAddress
LoadLibraryA

user32

GetWindowThreadProcessId
PostThreadMessageW
SetTimer
CreateWindowExW
PostMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ