2d0268a3f7d24c250c671abda0e84d78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d0268a3f7d24c250c671abda0e84d78_JaffaCakes118
Size

60KB
MD5

2d0268a3f7d24c250c671abda0e84d78
SHA1

c854cecc5ba267700d7c57e9b2bcc260ee8a46ad
SHA256

67cfed65c3018e829965fecd75fced6989fdfdbe506089b6eefb7ec502a6b643
SHA512

4e68c9acec6d463c478f9811224bdd27ebe18a1e7c5e627eb2d3c0b7c206390423432716ed49c00a3494042400b19c65fba9fb5551d562b47b4ee21432e17284
SSDEEP

1536:rfeoNbUIdmnHgv42PWSNe25rlc/+vBO+jX9SJv5TTb9jS:TeerSgv4mNeirGgO+BeTb9jS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d0268a3f7d24c250c671abda0e84d78_JaffaCakes118

Files

2d0268a3f7d24c250c671abda0e84d78_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e041e2b961df9a8b600c746069215c2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTimeZoneInformation
IsValidCodePage
HeapValidate
GetTickCount
GetCurrentProcessId
GetConsoleMode
ExitProcess
UnhandledExceptionFilter
SetHandleCount

advapi32

RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ