59c4d34ac1b8d7ea7ec5924f22a4f415_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59c4d34ac1b8d7ea7ec5924f22a4f415_JaffaCakes118
Size

62KB
MD5

59c4d34ac1b8d7ea7ec5924f22a4f415
SHA1

2b682189d1ff77f77e34c7606a290e3bcfddeb2d
SHA256

d12f11ba65288c943599c11cd6642977a4d91cea8c878d0367e2ecafb176740b
SHA512

0bde1ec39deadbb98b665598603245e6b123cc611c40b9dcfe073b5396ae800e8d2901ffbb96a5472e731cadb81bce68d594b7aa8ee0231bdbe3367727caf49b
SSDEEP

1536:/NV4b9Ey9ZvPa74XpV2cWB9fwunasbsf3ZBZL+Pk2g99j0:VpuZ90R9ouasbMpX6lo9j0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59c4d34ac1b8d7ea7ec5924f22a4f415_JaffaCakes118

Files

59c4d34ac1b8d7ea7ec5924f22a4f415_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c5390a8a383227d9f1b222ca6dbdbcb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTickCount
RaiseException
GetOEMCP
ExitProcess
WideCharToMultiByte
lstrcatW
SetStdHandle

advapi32

RegSetValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ