5eb687ad8b274a3a8f578bca464e12e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5eb687ad8b274a3a8f578bca464e12e1_JaffaCakes118
Size

128KB
MD5

5eb687ad8b274a3a8f578bca464e12e1
SHA1

3acb3bfab24866358fad3aedef9f49ec202bb716
SHA256

23179e35dff5c2842f66102a7c7930b8e48441c95dbe11d4d7bbe5c44f9e3078
SHA512

e6c33b310e646a4d5ec045e635c77869062d6122693ebdf773de3bc93dafa71d17bdcebd163b28df2fe2316cccfc90a5fadb74e793a0a63f28e2007867c5613b
SSDEEP

3072:Sfp27zUPcaixawfvWcSj2AFhxeIx/2OxXmKXZ9jo:SxbPcayaem9Fxx/2OxFX4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eb687ad8b274a3a8f578bca464e12e1_JaffaCakes118

Files

5eb687ad8b274a3a8f578bca464e12e1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3d6165baf809dd6e155995eb08c5ca30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OffsetRect
MessageBoxW
MessageBoxIndirectW
GetMessageW

kernel32

HeapSize
QueryPerformanceCounter
LocalAlloc
HeapDestroy
ExitProcess
FreeEnvironmentStringsW
GetCPInfo
HeapCreate

advapi32

RegOpenKeyExW
RegQueryValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ