3c29a6fd9e001072823d26121fb7e4e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c29a6fd9e001072823d26121fb7e4e9_JaffaCakes118
Size

60KB
MD5

3c29a6fd9e001072823d26121fb7e4e9
SHA1

4d9d91198dab5798725c9778ca9011b0b6a62893
SHA256

da24539a49cdd0c855c505cecb17b39171caff091be63ea6cefd371329af58b8
SHA512

e5ac7d70ba528dcec2bf8204938caaf69171255a47c87e89d0ddcfe54fefc1f040b56b514e5f1ccecac4779eafdee89efc1a5f734d0038ddca2785ee387a7ff1
SSDEEP

768:th4nqrAV8Kp0TbQw2YTVV3iwhamQ8s07UNL5/V6HzGpY6ehGBz6HenOHhGGloVXJ:thHroKbjV4YZUH/VwASdHSCbQC9jrM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c29a6fd9e001072823d26121fb7e4e9_JaffaCakes118

Files

3c29a6fd9e001072823d26121fb7e4e9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ee6f83f16c8e4cba8f886ef6dbef2590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
DispatchMessageW

kernel32

InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
RtlUnwind
LoadLibraryW
HeapFree
GetVersionExW
WriteConsoleW
ExitProcess
GetExitCodeProcess
TlsGetValue

advapi32

RegSetValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ