0e95b6a3823620663a58a0f50b5ca870_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e95b6a3823620663a58a0f50b5ca870_JaffaCakes118
Size

63KB
MD5

0e95b6a3823620663a58a0f50b5ca870
SHA1

6091e683d5d03d0d4e231bc10f008e0a35b68370
SHA256

0f13943d0bb483f6df8042f347ad810c9b7933128a77c751b1672ce58c0e6cfb
SHA512

521bfd171d90be2e2a1b4f8c76aed34372ba7943ebab381b8d522b4158bf4bb0dcc31d1c220d3620a9b4abe6166c99bd97022798cf4b4ee34323471ec95ef8cc
SSDEEP

768:Q17YV7L35SL0Ej7BXpUlLoMUAyWzjlRtYrOdnZEn7ut2jCs/9fsJ7Mv7K2I6QdAN:NV+HjtClUAp3lRthnAu8ms8wvN9jv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e95b6a3823620663a58a0f50b5ca870_JaffaCakes118

Files

0e95b6a3823620663a58a0f50b5ca870_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3e66fedb9ddcf57f338c19af90be459e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
FillRect
EmptyClipboard

kernel32

GetOEMCP
Sleep
InterlockedIncrement
HeapValidate
HeapFree
GetLocaleInfoW
GetExitCodeProcess
ExitProcess
FatalAppExitW
GetConsoleOutputCP
TerminateProcess

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ