72192f0c15c130e62e5047e3f0181035_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72192f0c15c130e62e5047e3f0181035_JaffaCakes118
Size

328KB
MD5

72192f0c15c130e62e5047e3f0181035
SHA1

3aac3193644e5895e98054c4b64c59fafbc6e382
SHA256

c14d1a45c76a2655baa077161c7a5b37a86ca842c91aaf0121aa21c79811aa03
SHA512

bc3a5c820c549116c37c50b9a4c00d0aba74d8954bcab67db68a28c3ba50345e44dac2fbe26651162419ad86d0b4f977a17d631f124f66efac72273f90e9d8c9
SSDEEP

6144:Hcnpqs2h6wtsTd7yTo76wguQRrj7I2WIsP3jago2h62kcoKKIQ8:Hcn4s2h6wtsTYs7rmVfI2lsPTd6Hco8l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72192f0c15c130e62e5047e3f0181035_JaffaCakes118

Files

72192f0c15c130e62e5047e3f0181035_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fd0279b9cdcb1bb98f1a768ac2a99457

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHRegDuplicateHKey

kernel32

ConvertDefaultLocale
Beep
HeapAlloc
GetProcessHeap
HeapFree

user32

SetWinEventHook
GetMessageW
PostMessageW
IsDialogMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
UnhookWinEvent
GetParent
EndDialog
GetDlgItemTextW
wsprintfW
SetDlgItemTextW
SetFocus
GetDlgItem
GetWindowLongW
SetWindowLongW

winmm

mmioInstallIOProcA

Exports

Exports

ugbohe

Sections

.code
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 871B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ