47d6c6e5459c2634419360cab53eab93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47d6c6e5459c2634419360cab53eab93_JaffaCakes118
Size

58KB
MD5

47d6c6e5459c2634419360cab53eab93
SHA1

cb67995c9d5fcb923332b34f8a7b26617113f998
SHA256

7f842802796e98e9043dca06539a4eb3462a1825d974316b91dde62e6a6be9d2
SHA512

d9969c88f7d992650cc889b6c77b4415a4e3b221e996479ed4d5070d4a4e8e94638976e4798b89478ee47e6a1cd86a3014cd637bfd1837b00cd78a83f0fb672a
SSDEEP

1536:9y915ADfxpl0xEyfM43RO8/d41uzLTVqOO8RMj5:c915ADh0RMARn/douz/0Uc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47d6c6e5459c2634419360cab53eab93_JaffaCakes118

Files

47d6c6e5459c2634419360cab53eab93_JaffaCakes118
.dll windows:4 windows x86 arch:x86

53673db857c74fc44437a20f110316d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetFocus
FillRect
EqualRect
EndDeferWindowPos

kernel32

LoadLibraryW
FatalAppExitA
ExitProcess
EnterCriticalSection

advapi32

RegOpenKeyExA
RegQueryValueExA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ