JaffaCakes118_d675f98ee3b1367bf8c381b04ffa5197790d09c61805fd9bf1b2c6560b86def8 | Triage

Sharing

General

Target

JaffaCakes118_d675f98ee3b1367bf8c381b04ffa5197790d09c61805fd9bf1b2c6560b86def8
Size

1.7MB
MD5

3412a80ee239a4bf52a153758ea5ba8c
SHA1

17174ac1cc40cb0acff5876f0d36576a884484f8
SHA256

d675f98ee3b1367bf8c381b04ffa5197790d09c61805fd9bf1b2c6560b86def8
SHA512

d671d6a98e5e8cd0b8f555b477eb68f64702c86f74d99f9c603b4398a4e9df6a081bb1c15fe41e4904aa4b61beeda386952a94576d396ce20d4d6a77e97c5250
SSDEEP

1536:sjkUHInOKVU9vFhgD6wK1LhsfAWs/g9UhwtV/IeQ/HQljEqt:sjFiDgL+C/3hwXfuwJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_d675f98ee3b1367bf8c381b04ffa5197790d09c61805fd9bf1b2c6560b86def8

Files

JaffaCakes118_d675f98ee3b1367bf8c381b04ffa5197790d09c61805fd9bf1b2c6560b86def8
.dll windows:6 windows x86 arch:x86

c131e7ab95b6cc6ff4c2379d5b0fc4ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
CreateFileA
InitializeCriticalSection
WaitForMultipleObjects
GetLastError
WideCharToMultiByte
EnterCriticalSection
GetProcAddress
LoadLibraryA

user32

GetWindowThreadProcessId
PostThreadMessageW
SetTimer
CreateWindowExW
PostMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ