6f0991fb93476235a9970b22838f82d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f0991fb93476235a9970b22838f82d3_JaffaCakes118
Size

62KB
MD5

6f0991fb93476235a9970b22838f82d3
SHA1

1c1f812191b83c98d73f0655d405414509cab1d4
SHA256

dcdd70a5649d80abd8f175b783cbc920751a21cbace0b892cf90c8e9165419b3
SHA512

ba5222e2dd5f77e5271b5ee22bf9b951d7380e0cb74f0b5c0254fb9b0ac31e35553496f4aedf9d1beeba506ab60b8b703dff20fb8c61c6a8d9ffcbd7268f50ed
SSDEEP

768:yJWvgAg1wPuIYjWvYpJKexaPr82otPoQf7jCZSCgizigInOe9ukiAA9jZ:3LzKavspAPr8VvCZSeigoOtN9jZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f0991fb93476235a9970b22838f82d3_JaffaCakes118

Files

6f0991fb93476235a9970b22838f82d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ee6f83f16c8e4cba8f886ef6dbef2590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
DispatchMessageW

kernel32

InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
RtlUnwind
LoadLibraryW
HeapFree
GetVersionExW
WriteConsoleW
ExitProcess
GetExitCodeProcess
TlsGetValue

advapi32

RegSetValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ