031ee8bbd833635ddaf54462a60700c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

031ee8bbd833635ddaf54462a60700c3_JaffaCakes118
Size

98KB
MD5

031ee8bbd833635ddaf54462a60700c3
SHA1

b3ac861253cb3ba0049c23300d5276faf260b353
SHA256

8ca7f4ea8fdadb1cbae87dea60a801d725a31949f4a76422d8c335e226771747
SHA512

327692a25d294cbcc6bf164dee89d4962cc93965af084566aa26b4dc8801ccbe6c2b8a046f9b4da667ec5c122b7b9c15b84f5af5cdf8343dacdedacfe90592c1
SSDEEP

3072:D8v/aMtT7HRgXk+aKX06M4mvN5WQtetZBmPJ9SS9jk:DqBfxgSr4mvHW8et+PJ9Sh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
031ee8bbd833635ddaf54462a60700c3_JaffaCakes118

Files

031ee8bbd833635ddaf54462a60700c3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b76bd0b888430e1d7602832f7ef80c52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard
DispatchMessageW

kernel32

GetUserDefaultLCID
GetLocaleInfoW
ExitProcess
UnhandledExceptionFilter
SetEnvironmentVariableW

advapi32

RegEnumValueW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ