22f1d2f195461d88d81aa230553d38b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f1d2f195461d88d81aa230553d38b3_JaffaCakes118
Size

83KB
MD5

22f1d2f195461d88d81aa230553d38b3
SHA1

10c1c0a15338c19910c5e806579c88e3fd4b4899
SHA256

ee027e89fad4e2089d2a33c5c93320d5e14a40b9cd348cc57d53b08bf96422b2
SHA512

1fe772ccf372ede916eca387fa5aeea8e21bd20abe49a36b34b28a0ee5b7e33ddcdf6f8ddaf301f3abb6ba42abcec534e2d21061819a3f7add24b5a554d59619
SSDEEP

1536:kKHuLg7D2KOXRlW1S452WzDwMnoWah66ZogFE2GfA20gldoYA5aIElE5D/OXVWVx:Tfwa1ocwM2DogFnGfrRDoYeOFkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f1d2f195461d88d81aa230553d38b3_JaffaCakes118

Files

22f1d2f195461d88d81aa230553d38b3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5c4a7a40ac3826826f03ca8065ad4867

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDlgItem
CharNextA

kernel32

GetStringTypeA
ExitProcess
VirtualFree

advapi32

RegEnumValueA
RegQueryValueExA
RegSetValueExA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 905B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ