6f1351447c40a7f987643a96392e6b69_JaffaCakes118 | Triage

Sharing

General

Target

6f1351447c40a7f987643a96392e6b69_JaffaCakes118
Size

61KB
MD5

6f1351447c40a7f987643a96392e6b69
SHA1

72f3178a9f278ae21d7a460c69ee20d6648b6e77
SHA256

4d14f95f9e7a053b580ff3e4adbea3135ca650e24ec3826769626725773b44a7
SHA512

afb428f8d12c6bf8bca67671488d2c7838e28a2594cc2a4df59120b21a401a5d5335ee7a6f1e49a25bebb56ff9146cdf412271f04507bab98e4fe62f8f5a8d55
SSDEEP

1536:RxQeXaPnyr/zrFBtZOFHcSGThucWQzcs9jX:RxQeXafyLnHOB/GTEEzB9jX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f1351447c40a7f987643a96392e6b69_JaffaCakes118

Files

6f1351447c40a7f987643a96392e6b69_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b400d91b2daa6c26e460bacbe305f71d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxW
MessageBoxIndirectW

kernel32

LocalAlloc
OutputDebugStringW
ExitProcess
GetACP
HeapValidate
InterlockedDecrement
InterlockedExchange

advapi32

RegEnumValueW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ