736ca912e583ec8e756780825a56cf73_JaffaCakes118 | Triage

Sharing

General

Target

736ca912e583ec8e756780825a56cf73_JaffaCakes118
Size

90KB
MD5

736ca912e583ec8e756780825a56cf73
SHA1

9196081e084e481f0a41102a85dc4c734edc2914
SHA256

989d3fdfb3030d5f9295887078632df7d1e5113f8176241d9a27691ece482c9a
SHA512

c4687e585722a4d5579becd05c56205f44d7fb072fe3e4dd6f5063ad27a46af7170d29a3d39bd57bab811facc6f0e556e60a0c6c0a934e06c1ec73ccbab58839
SSDEEP

1536:zyyPeS44GORTUaw2yWvmy/s9ewpNgzUuF7p3ZVX/vOsiY8nfbu:zyyKnaw5yNaeymUuFNJVOsL0u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
736ca912e583ec8e756780825a56cf73_JaffaCakes118

Files

736ca912e583ec8e756780825a56cf73_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0380a00e9a00ffdc03a97c8241595930

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
FillRect

kernel32

LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree

advapi32

RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.code
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ