2f442c9d9c1db60f8b854a2c5b59c377_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f442c9d9c1db60f8b854a2c5b59c377_JaffaCakes118
Size

95KB
MD5

2f442c9d9c1db60f8b854a2c5b59c377
SHA1

fa136a05bd546c0ced5704d45282434eaa6f41f6
SHA256

e867017c851ca1288307471e52ac98df3c062288bcc7ae2b4787b03df491771c
SHA512

f778b3291a7448c8856e820f73c3e14df82591efb9ace26ca3bb8c0a6a04cfabd869fe0e15e042adfff19f50cbcd83567047c23e18f7b21a9e15a58a28d8059d
SSDEEP

1536:Rcs1M6H8A6QG2wwt7PIhKxefyICZlgooFKDgsmPI9W59a8FVMBDjN0eo7CkyPRS1:RLfH8A/G2w0GKxQeCLKDbkI457MNJ0eO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f442c9d9c1db60f8b854a2c5b59c377_JaffaCakes118

Files

2f442c9d9c1db60f8b854a2c5b59c377_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6b0ddd15c3908d104f0671a334b06b97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
MessageBoxIndirectW
GetMessageW
FillRect
EmptyClipboard

kernel32

GetTimeFormatW
ExitProcess
InterlockedExchange

advapi32

RegOpenKeyExW
RegSetValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ