f41ef31b14883f3c6024a38a9d2efcb7_JaffaCakes118 | Triage

Sharing

General

Target

f41ef31b14883f3c6024a38a9d2efcb7_JaffaCakes118
Size

85KB
MD5

f41ef31b14883f3c6024a38a9d2efcb7
SHA1

cc8f3b91495eee0a0d3e68d17c5732ebc868bd24
SHA256

eeb386d495fed8f3048b34da32a93fb193257d58c00c1c8723e91f5f7cb8d26b
SHA512

fcc2586a022b61720b727c7d484f00e64f37787241c13551145e1c0f865b9158ecb5ad8f6f8b3c82e8467d402f69a2ee808f8022a77d7dc30d8bf43e8c83cc50
SSDEEP

1536:grMlKUH5HH6zrxa208ZtfkdIrViQ4WgGz1PcNwCa5PDLnhMl6l9j/:eM0UZnCrk8Zl30W7z10NEDLO6l9j/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f41ef31b14883f3c6024a38a9d2efcb7_JaffaCakes118

Files

f41ef31b14883f3c6024a38a9d2efcb7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ee6f83f16c8e4cba8f886ef6dbef2590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
DispatchMessageW

kernel32

InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
RtlUnwind
LoadLibraryW
HeapFree
GetVersionExW
WriteConsoleW
ExitProcess
GetExitCodeProcess
TlsGetValue

advapi32

RegSetValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ