33c1fa43af26135c6122d70bdbba8483_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33c1fa43af26135c6122d70bdbba8483_JaffaCakes118
Size

62KB
MD5

33c1fa43af26135c6122d70bdbba8483
SHA1

e78c1c1bc95db765cc4725013ef3c5029a7cb1fe
SHA256

381ebe5c53eda01e80d2504126c836fc37cbc008c0a2c2e8ed6850d82928ebc4
SHA512

38cbf91f2bdb74df4cbeddd36eee521fb191c170000fdfc57d4a9410082dd4ea29cb06de93e673bef5709c706619e22784b82aad214074270aa28ade41922093
SSDEEP

1536:94iABvrH/NoHdWx1X60RF1ZFBH8bsvNRvg9ArZPPEDX9jG:GiWH/NoHs16GvBH8bGNK25P6X9jG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33c1fa43af26135c6122d70bdbba8483_JaffaCakes118

Files

33c1fa43af26135c6122d70bdbba8483_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a3e41914a4373cd36f238b911bd83341

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect

kernel32

ExitProcess
CreateProcessW
CompareStringW
IsBadReadPtr
GetModuleFileNameW

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ