fb3c1ef0fa06ef21d92320a8ddb3987c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3c1ef0fa06ef21d92320a8ddb3987c_JaffaCakes118
Size

61KB
MD5

fb3c1ef0fa06ef21d92320a8ddb3987c
SHA1

73713ada6104efae4d3a788ece06b55ae9bf4e12
SHA256

3aaa8852daa945178d8bbd365501a083404fdfd9b15219f5d4e3fabfe401ea40
SHA512

17450df1a49ddf7462204cf687f2cab68ef180769c9a30665a61a56d8b649a27e308cbde9a1caa8b12e956f27c9edaf836882f29e8fdb0bcea171b479dbd63ab
SSDEEP

1536:RxQeXaPnyr/zrFBtZOFHcSGThucWQzcs9jn:RxQeXafyLnHOB/GTEEzB9jn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3c1ef0fa06ef21d92320a8ddb3987c_JaffaCakes118

Files

fb3c1ef0fa06ef21d92320a8ddb3987c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b400d91b2daa6c26e460bacbe305f71d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxW
MessageBoxIndirectW

kernel32

LocalAlloc
OutputDebugStringW
ExitProcess
GetACP
HeapValidate
InterlockedDecrement
InterlockedExchange

advapi32

RegEnumValueW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ