2318f9112095a2b041d0c25ddb30fa33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2318f9112095a2b041d0c25ddb30fa33_JaffaCakes118
Size

62KB
MD5

2318f9112095a2b041d0c25ddb30fa33
SHA1

83b74ace04b7f83c6aad1e5731942e4f3b0059dc
SHA256

216462d9e4b6917db50a0dd48abf476e51355b823e7a694db5f8ff18f26923c9
SHA512

14e5181e41488e28bdce6f9b60e8b20d87a8b2481dc1bd9857899d15b2a94cd5bc3cfb00a9c2a7023d1fbeecb3809b5dc578b0aeeeb34aa2b450f0101ff28f70
SSDEEP

1536:dmJJNsAe7wM/JCAKt4pp7K7MAGsQlXS+n7Vg9jy:dmWDNRCAKt4p58ZVAC8Vg9jy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2318f9112095a2b041d0c25ddb30fa33_JaffaCakes118

Files

2318f9112095a2b041d0c25ddb30fa33_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6b0ddd15c3908d104f0671a334b06b97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
MessageBoxIndirectW
GetMessageW
FillRect
EmptyClipboard

kernel32

GetTimeFormatW
ExitProcess
InterlockedExchange

advapi32

RegOpenKeyExW
RegSetValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ