3361bc83b34e2a0d66f0010c089f79f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3361bc83b34e2a0d66f0010c089f79f9_JaffaCakes118
Size

99KB
MD5

3361bc83b34e2a0d66f0010c089f79f9
SHA1

03e3721adcdc19955d2ede83b55245f512032a5f
SHA256

1f8b21cbe8a4e5309c690a462de69c88a1cb691595d1d0875deb3f89beb7ae08
SHA512

46ccae3a339108301c60e3cc0cbb950eb95c1469c888aee23b26122fab085fb6836b3a0f0bbd6aac71f0ef042d2280f9f2c5b836b74a57ed7fe7059c5544ae7a
SSDEEP

3072:IAhunkCEPdfHWz2kCCKld6vDPleOUgG9jf:IAckzlP/Vj76vDnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3361bc83b34e2a0d66f0010c089f79f9_JaffaCakes118

Files

3361bc83b34e2a0d66f0010c089f79f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1dc948a256cf1da9cdb42389386d691

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetOEMCP
InterlockedIncrement
GetUserDefaultLCID
GetConsoleCP
FatalAppExitW
ExitProcess
lstrcatW
SetEnvironmentVariableW
IsDebuggerPresent
DebugBreak
IsBadReadPtr

advapi32

RegOpenKeyExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ