3280f8e5fb08488b74bb2f521438a083_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3280f8e5fb08488b74bb2f521438a083_JaffaCakes118
Size

96KB
MD5

3280f8e5fb08488b74bb2f521438a083
SHA1

1a254ff3a3f11bdd78f89286a6510ee586fb3b06
SHA256

064f2cd0b1d0f3939e82ec801758731a631c99380a96d8f950d64df6d611f1eb
SHA512

417a2c1057034af07343919da4c7cd05b3a66bc1c154464d2a69a762e328c6603be51020a32f127ca7935ca3cf85c4652df7b413b574c4c7cf4b6689016e73f2
SSDEEP

3072:kWvpT4LxoWH/ouUFLT+52EWbTtEhjIU9Wc9jN:kWv54tFAumTuWGqU9WS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3280f8e5fb08488b74bb2f521438a083_JaffaCakes118

Files

3280f8e5fb08488b74bb2f521438a083_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ee6f83f16c8e4cba8f886ef6dbef2590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
DispatchMessageW

kernel32

InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
RtlUnwind
LoadLibraryW
HeapFree
GetVersionExW
WriteConsoleW
ExitProcess
GetExitCodeProcess
TlsGetValue

advapi32

RegSetValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ