ec8712f8ee3f1d0964b377a18c9e7684_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec8712f8ee3f1d0964b377a18c9e7684_JaffaCakes118
Size

63KB
MD5

ec8712f8ee3f1d0964b377a18c9e7684
SHA1

5814f0e0aeb3f59fbfe745303e2a197946cf0e34
SHA256

a6ff481f5e6665120cfe9d552f22509564fbbfc6631629a17c0e5bfe2f7f7b6d
SHA512

a2c9b0df85b32dd710f65bbaff4636e2ef4827b45f0332e74f1f7302654a5a7d140314a16a04e667dba4ee70795b0e8aa3aaac671f1309e79641bad5739aace4
SSDEEP

1536:ty3f51tj0OInWL5iD5QXh7Ov8DbeVwMh5s:ty3fBXL6Qx7Okvee+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec8712f8ee3f1d0964b377a18c9e7684_JaffaCakes118

Files

ec8712f8ee3f1d0964b377a18c9e7684_JaffaCakes118
.dll windows:4 windows x86 arch:x86

04ca92fd91d242dffdbc2dabd9f321bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetStdHandle
SetConsoleCtrlHandler
LoadLibraryW
HeapDestroy
GetExitCodeProcess
FatalAppExitW
WriteConsoleW
DebugBreak
EnumSystemLocalesW
ExitProcess
TlsSetValue

advapi32

RegQueryValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ