14a530f2144b7f95445badeb79eafe45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14a530f2144b7f95445badeb79eafe45_JaffaCakes118
Size

83KB
MD5

14a530f2144b7f95445badeb79eafe45
SHA1

85a87c9f9be31a7fe57be1245a456d5a02833f45
SHA256

3a0997d6563a9da373e84e77dbabddeb1d9c5d87508426396e5c2d0c75ebcba9
SHA512

cbc9d98f269b3d46e7c8a94a363752ea45c0e2e7510d1518bbafe7954a05bd269cb10bc6f16177e0b4922a44b699f1422d5877c4ed70d5af8e7b488dd59d1c89
SSDEEP

1536:oK7EWfj7R9Zjh6Sh+cmM8mShNKKEOCkGPsYfZY8qFU+x8Pj9jZ:o4EWfjJh0M8mSvKKxGPs7FU7b9jZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a530f2144b7f95445badeb79eafe45_JaffaCakes118

Files

14a530f2144b7f95445badeb79eafe45_JaffaCakes118
.dll windows:4 windows x86 arch:x86

940c3b1c0e7b84baf863e0403e379bf3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
MessageBoxIndirectW

kernel32

lstrcatW
TlsAlloc
ExitProcess
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedExchange

advapi32

RegSetValueExW
RegOpenKeyExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ