2c8dd47d963f44ca1d66568d2b5424a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c8dd47d963f44ca1d66568d2b5424a0_JaffaCakes118
Size

97KB
MD5

2c8dd47d963f44ca1d66568d2b5424a0
SHA1

942398849d915f958df6f695fad3ac8828a193d9
SHA256

e46a69a18ad5ae8921fcfed863ec2029f7f56feedf567ecc7e992dee5bee9ece
SHA512

30a24262f804dd14a3f6244afe1517f26b845fb72ea78d7c6ab10f0fb2c41e6b6c32dfcada47777756d0001778a6ed80ae09633ebb443205f66dc1b46c7cd10e
SSDEEP

1536:vhLeTmLuyssXYIqiHDCPxdpCZnsXNjSqfaHlzZcd+EJD0bKLpQznVj9jp:MCuysnLiHDCcPwn90uLpE9jp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c8dd47d963f44ca1d66568d2b5424a0_JaffaCakes118

Files

2c8dd47d963f44ca1d66568d2b5424a0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5c2d4b2511878352051f70d16c181ea0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OffsetRect
MessageBoxIndirectW
GetMessageW
FillRect
EmptyClipboard

kernel32

ExitProcess
CompareStringW
GetTimeZoneInformation

advapi32

RegEnumValueW
RegQueryValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ