JaffaCakes118_c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22 | Triage

Sharing

General

Target

JaffaCakes118_c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22
Size

184KB
MD5

562c20d1e6f1551b3453910cadda8a52
SHA1

3c2333d3955d045c24837fbf98da7be2e31de43e
SHA256

c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22
SHA512

74eae1a284e063ff9bffee0cad79aa67f7ed7b49509f3eb1c45793d2667ee70761e3d940a51c53d5a3600f50ee08ab420755c744b7b3258858d99957a824f074
SSDEEP

3072:Y92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTYrLA:Y9NSMOEpQ1Q3ODAr+V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22

Files

JaffaCakes118_c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22
.dll windows:5 windows x86 arch:x86

f684d1d1b2c4c4c5eddaa7c939270df0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset

oleaut32

VarBstrFromDec

user32

ShowOwnedPopups

kernel32

GetModuleFileNameA
LoadLibraryExA
GetModuleHandleW

advapi32

RegLoadAppKeyA
RegisterEventSourceW

gdi32

GetFontData

Exports

Exports

CcfZASHbgfDsbf

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ