f65a2ae6f98109dbecf3ed91c06278b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f65a2ae6f98109dbecf3ed91c06278b4_JaffaCakes118
Size

60KB
MD5

f65a2ae6f98109dbecf3ed91c06278b4
SHA1

c2804e2d84e0faa1522d3bf80847ab70d3875255
SHA256

fbaf559f15cdea27cbdf742e8109a44e9e33a3f9ff304d0a73607c2b86600d02
SHA512

6c2cfe60bfca92d6b075dbe589a29eeef60e11e7e590d19f0973f857732652d83693a250b1f85bf18d024fdd7830bfb70e2b173afec94807eef224bfaa7a7d25
SSDEEP

768:bl0Cmsnfnn5qOpqtqWxYMzXfPJs2eJ2osOCrUwJ4phUgIVOisWLsBmkeMP:R0C9/kzkWK8f4/s3r9ShUgtDIsgkt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f65a2ae6f98109dbecf3ed91c06278b4_JaffaCakes118

Files

f65a2ae6f98109dbecf3ed91c06278b4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0380a00e9a00ffdc03a97c8241595930

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
FillRect

kernel32

LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree

advapi32

RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ