26b87e16cd134f13e67dc43181abe537_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26b87e16cd134f13e67dc43181abe537_JaffaCakes118
Size

60KB
MD5

26b87e16cd134f13e67dc43181abe537
SHA1

a5fc6c00ab4cdba699d8fa4e14c11f08f0ed79d0
SHA256

1f476943bcc82fef65ca1f116171dcd8773c30de5134249a70818d827f450122
SHA512

c33757e868aeb2761f0f1825146ad2aefe0e8edf5fc9d94a6b4d4aa7f3a512e6d7802d812b121c73cb34830594fad1145823987a384a2f21df7aa106693c8964
SSDEEP

1536:Xo36nDpZ7NlgV7g5AZVxNu7mns3d+Rs1QgRMjXf64:hpBgV7geVTdjP64

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b87e16cd134f13e67dc43181abe537_JaffaCakes118

Files

26b87e16cd134f13e67dc43181abe537_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c5390a8a383227d9f1b222ca6dbdbcb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTickCount
RaiseException
GetOEMCP
ExitProcess
WideCharToMultiByte
lstrcatW
SetStdHandle

advapi32

RegSetValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ