1a555a996cc508f0d06c96b8fddb01ec_JaffaCakes118 | Triage

Sharing

General

Target

1a555a996cc508f0d06c96b8fddb01ec_JaffaCakes118
Size

91KB
MD5

1a555a996cc508f0d06c96b8fddb01ec
SHA1

08dd3a7e8f9bbe3219c2418c283da0542811a85d
SHA256

a14469a7b8183b0ae4b10f98b9e0c6f53d6b1b8ca93783b96bd9b89eea0d813a
SHA512

8f26c6dd5a73596cac12407ba31a3c371776355d36e500cefe380e6c652406a3f24a53221473357b56378625fb5bada03b434d6eeecc9169bdd2be08ab02629c
SSDEEP

1536:EGhAVIN8hlZlwyoff5UuIQYX2xQuVO5RQ7Hj/n3sfhTar:1ASqhlCNIQmdl5RQjTcfUr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a555a996cc508f0d06c96b8fddb01ec_JaffaCakes118

Files

1a555a996cc508f0d06c96b8fddb01ec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

97268fb4d9dade1f0be1e61d053100ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
MessageBoxW
MessageBeep
GetMessageW
DispatchMessageW

kernel32

HeapDestroy
SetFilePointer
SetEnvironmentVariableW
GetStdHandle
GetExitCodeProcess
FlushFileBuffers
CloseHandle
ExitProcess

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ