JaffaCakes118_73f87bfab18a3c0ff28d3048184de7b4652bc6f471b1fe4c97b9e85fdae6072f | Triage

Sharing

General

Target

JaffaCakes118_73f87bfab18a3c0ff28d3048184de7b4652bc6f471b1fe4c97b9e85fdae6072f
Size

1.7MB
MD5

6de69e1e8477202860676e369212a38f
SHA1

cff62e4c51aba70de5cd39687c289726c1795537
SHA256

73f87bfab18a3c0ff28d3048184de7b4652bc6f471b1fe4c97b9e85fdae6072f
SHA512

7ebfe246860d72e9f8d88fa94b16b4d58d6eea2e35092b964121b7690f52b4dfa8790f23e3e6281acc90d92f7ccc99205f3d4fce0c7334131f347585e63926f0
SSDEEP

6144:QshRn0xQiSObHKVLk6cAw3nLbg2K3i9QMGeuJIbOjlvJ+XWeR6eS4P4BSMY8qkPa:nhRnh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_73f87bfab18a3c0ff28d3048184de7b4652bc6f471b1fe4c97b9e85fdae6072f

Files

JaffaCakes118_73f87bfab18a3c0ff28d3048184de7b4652bc6f471b1fe4c97b9e85fdae6072f
.dll windows:6 windows x86 arch:x86

1fa671711f279705d6bd2c8cc8ae7b82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjects
WaitForSingleObject
GetLastError
InitializeCriticalSection
WideCharToMultiByte
CreateFileA
LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA

user32

SetTimer
PostMessageW
GetWindowThreadProcessId
CreateWindowExW
PostThreadMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ