06dda7404381f533d5f9bc58f8d4be5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06dda7404381f533d5f9bc58f8d4be5e_JaffaCakes118
Size

332KB
MD5

06dda7404381f533d5f9bc58f8d4be5e
SHA1

543584053c6be2bbfbd9a849e62f83a66f8056cb
SHA256

615d42301d40c5567517fae7f949dab34f37e6a02ae638ebc9503a157a0618a2
SHA512

e46435c57cc26f785db93ab6752013048e9b6467d2dda0af88b58659b933e9803a85e45492fdb9b208f3d20f673cbd2da614062d2c20d3cd43a30cfd5dfbd054
SSDEEP

6144:TwpJIZu/yXHzA+Q1ghqVr2lhlsZ2bHOi1IzQz6GRlLZV3YTkZIz+iEJL3:TiJIWy3yShqZ2ZsZ2bHR1Ikz6WV6kZIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06dda7404381f533d5f9bc58f8d4be5e_JaffaCakes118

Files

06dda7404381f533d5f9bc58f8d4be5e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

53673db857c74fc44437a20f110316d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetFocus
FillRect
EqualRect
EndDeferWindowPos

kernel32

LoadLibraryW
FatalAppExitA
ExitProcess
EnterCriticalSection

advapi32

RegOpenKeyExA
RegQueryValueExA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 769B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ