04a13b208a0f4d486d32ea1db893d62d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a13b208a0f4d486d32ea1db893d62d_JaffaCakes118
Size

84KB
MD5

04a13b208a0f4d486d32ea1db893d62d
SHA1

66145840b22f012ee205bf2b86a066375a424199
SHA256

7b03b048fe97d1516f18806e74b6ad5d85be3c6eded4ae81bb3fd67f890b019f
SHA512

54286f6949b4dc960cd2de2f32aca16156a6558f5d0b8a9cad3503b7020efb9feabc3ba94f8d75eda887f6c6b60848ade33ce78cd4b93affda4690af1924e247
SSDEEP

1536:DzbPdb+1vroVtWVS7i7ZA3Xm0sW+kSj9j:DzbAtoV8VtAHm0spj9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a13b208a0f4d486d32ea1db893d62d_JaffaCakes118

Files

04a13b208a0f4d486d32ea1db893d62d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ee6f83f16c8e4cba8f886ef6dbef2590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
DispatchMessageW

kernel32

InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
RtlUnwind
LoadLibraryW
HeapFree
GetVersionExW
WriteConsoleW
ExitProcess
GetExitCodeProcess
TlsGetValue

advapi32

RegSetValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ