JaffaCakes118_b253c05ed8ebd4be6016d0b1305084e21c5b45ffb372dee5bd71b969971a90f5 | Triage

Sharing

General

Target

JaffaCakes118_b253c05ed8ebd4be6016d0b1305084e21c5b45ffb372dee5bd71b969971a90f5
Size

2.2MB
MD5

159f7a8751a63292a974206078a31b55
SHA1

e48a00a5d567168f78c198d132c3ee1c4e802bf6
SHA256

b253c05ed8ebd4be6016d0b1305084e21c5b45ffb372dee5bd71b969971a90f5
SHA512

89c0d2f1b3b93a425d68f1428d43a20132635d6dea6e20a03a6ab354d6d9721a9026cdd069c04d0944f7ffee895d2dba63ad245a2b393189417c1cf84c9074df
SSDEEP

6144:Zo0gTwr/cG3J8Wt/s1XGxfSCkq/vWc3Wh0lxPIerqtg:ZoidiofSt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b253c05ed8ebd4be6016d0b1305084e21c5b45ffb372dee5bd71b969971a90f5

Files

JaffaCakes118_b253c05ed8ebd4be6016d0b1305084e21c5b45ffb372dee5bd71b969971a90f5
.dll windows:6 windows x86 arch:x86

f6e78a44fb426322e4a2ad9bdbb39b63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
WaitForSingleObject
CreateFileA
GetLastError
WideCharToMultiByte
DeleteCriticalSection
GetProcAddress
LoadLibraryA

user32

GetWindowThreadProcessId
PostThreadMessageW
PostMessageW
SetTimer
CreateWindowExW

Exports

Exports

HorekGlepW

Sections

.text
Size: 528KB - Virtual size: 527KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ