3aa67ba828b8b0ced3d6a946fed258f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aa67ba828b8b0ced3d6a946fed258f2_JaffaCakes118
Size

61KB
MD5

3aa67ba828b8b0ced3d6a946fed258f2
SHA1

f08925a2f124ed722c0b2a45e16cdc51e3c86505
SHA256

19942846782058a471b3a98134a5f5631e3a43c8d82c4ee114225373154d3531
SHA512

127412905f1edb0ab9eb843f57b5e0e2d49105bbee72c2eb6b5c05501131dab7e5857993fc92dfb7b76106bbafc80190775b7523f166124d78af7727732ba958
SSDEEP

1536:xTdYJcojJqZbOn5i3SDsw1QLcOa/qM9j/:QbjJ8k5i3ClQLPa/59j/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aa67ba828b8b0ced3d6a946fed258f2_JaffaCakes118

Files

3aa67ba828b8b0ced3d6a946fed258f2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

04ca92fd91d242dffdbc2dabd9f321bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetStdHandle
SetConsoleCtrlHandler
LoadLibraryW
HeapDestroy
GetExitCodeProcess
FatalAppExitW
WriteConsoleW
DebugBreak
EnumSystemLocalesW
ExitProcess
TlsSetValue

advapi32

RegQueryValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ