62ad7dc5bacf6c818953db94821a2fb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62ad7dc5bacf6c818953db94821a2fb9_JaffaCakes118
Size

61KB
MD5

62ad7dc5bacf6c818953db94821a2fb9
SHA1

09b21f49bd21f915dad7fc14fc25020512cec425
SHA256

9288d33d3a86334c4bd3168fc7eca8b2703e128ccc49dd1a3b0dafae24f2cb36
SHA512

63ff92da8925fef058e6a6cd5e78ef012e7467e8856283e999e22d938454a40d023da21954e92cf09e7ba65602e94c6333b3764ae213e5be82b8c1656cd7769e
SSDEEP

768:/aluaTWBwhMNqiR4lZVb/DYNBedNHveftNgD6AfIiVYoQyUYRX8eRWAzfExS:/AuVaoZYV3mgkekoQy/l8fIExS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62ad7dc5bacf6c818953db94821a2fb9_JaffaCakes118

Files

62ad7dc5bacf6c818953db94821a2fb9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3d272a52023a5a920a3b4cb5f29185b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetFocus
DestroyWindow

kernel32

HeapFree
GetVersionExW
ExitProcess

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ