48b4b413f00ebe0deebb8f9bd635ad93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48b4b413f00ebe0deebb8f9bd635ad93_JaffaCakes118
Size

84KB
MD5

48b4b413f00ebe0deebb8f9bd635ad93
SHA1

7e5be64c0c9414aa2948f4254bec125b223cd24f
SHA256

3e52cebce634c38e8cbd479d4dbecd945a10442e698cbc1f9400c9a3ffc66ffb
SHA512

99799b018894a698e3fd14d126727fa726965fa5a6094f70c0457198057c7defdea74f230fcffdba03abf2960985035aacde4a662c52384251eb18a6c91d6ce2
SSDEEP

1536:DJZv2LHIbEWvYHyuK0tzvrrOE/wewjbBiUUZeFG0Fc6qDrGW9jH:1ZvKy0Eew/7UZeO7N9jH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48b4b413f00ebe0deebb8f9bd635ad93_JaffaCakes118

Files

48b4b413f00ebe0deebb8f9bd635ad93_JaffaCakes118
.dll windows:4 windows x86 arch:x86

04ca92fd91d242dffdbc2dabd9f321bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetStdHandle
SetConsoleCtrlHandler
LoadLibraryW
HeapDestroy
GetExitCodeProcess
FatalAppExitW
WriteConsoleW
DebugBreak
EnumSystemLocalesW
ExitProcess
TlsSetValue

advapi32

RegQueryValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ