25a219c6669d8c7547d8e094fa250503_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25a219c6669d8c7547d8e094fa250503_JaffaCakes118
Size

60KB
MD5

25a219c6669d8c7547d8e094fa250503
SHA1

40ee0800244612b91b1967ece24bf40e1da26223
SHA256

98c3be48741cdf86edd7f9f586fa3f7121a7920c4a0014f2c71cfba0c09016bf
SHA512

5e967375260d09d89fbf2f5b367f2f2fc2b27b585978a7edf624e2bdd8b61f86da3ec61b0605f021f7f21f1d2d5014f20cef2c971a26ba909a559fc2470185bd
SSDEEP

1536:SWH6CZi+DCv6O/4jiykUcayXwHBAvUVMWWniW49jf:7H6CZbDCaiyLtyX6BLW89jf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25a219c6669d8c7547d8e094fa250503_JaffaCakes118

Files

25a219c6669d8c7547d8e094fa250503_JaffaCakes118
.dll windows:4 windows x86 arch:x86

04ca92fd91d242dffdbc2dabd9f321bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetStdHandle
SetConsoleCtrlHandler
LoadLibraryW
HeapDestroy
GetExitCodeProcess
FatalAppExitW
WriteConsoleW
DebugBreak
EnumSystemLocalesW
ExitProcess
TlsSetValue

advapi32

RegQueryValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ