fb1509a188e327db3d2b0a57ab2c9bd0_JaffaCakes118 | Triage

Sharing

General

Target

fb1509a188e327db3d2b0a57ab2c9bd0_JaffaCakes118
Size

84KB
MD5

fb1509a188e327db3d2b0a57ab2c9bd0
SHA1

97aa2aba96c64e2ffba5e33559aa1c0bd79c1564
SHA256

9c2991620db3d433e1f0d493e33f5e0378dfe346bc2a5aaa9175228a8703c8b5
SHA512

6a5bdf35e87303a21339e6f282c7a5d5ba22b75f484683bf7fd394a743890442f0f328e3978704d453f8103cd0ba38c1fa2e238c7e61a4a3061ae09edeeacc61
SSDEEP

1536:G+NPi9z0loXmhhYW+kIKdPmiL8ZAXqvhCKHi5+QiKprz:G+NKuoWh6WzISNL8ZZpe6uz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1509a188e327db3d2b0a57ab2c9bd0_JaffaCakes118

Files

fb1509a188e327db3d2b0a57ab2c9bd0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0380a00e9a00ffdc03a97c8241595930

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
FillRect

kernel32

LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree

advapi32

RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.code
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ