774620c523a6ad8275c70dcf979edd14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

774620c523a6ad8275c70dcf979edd14_JaffaCakes118
Size

89KB
MD5

774620c523a6ad8275c70dcf979edd14
SHA1

39e865e0acf0abc38fa34c5a2912c1dbf63ee81d
SHA256

e6631bc66bf86df73aade48ef71a8deabafec69c6eb9a816f7f3a9f2116b35c9
SHA512

87de5009be237201687dee3745cdb27d235317d255de40a5a96b68dd251b7742d19386fb584c9375353fdc17a477d57996657b43d4b1bcd5b6094692c32232f4
SSDEEP

1536:C4IW95UwTjnRMvL0J3CurktFf005RxOz2unlLCgwsX1BIsIwGCItKhRkjk5C0QUb:CZ4jR8L0J3oKsAKmLZ1GsI+ItKGA50E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774620c523a6ad8275c70dcf979edd14_JaffaCakes118

Files

774620c523a6ad8275c70dcf979edd14_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0380a00e9a00ffdc03a97c8241595930

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
FillRect

kernel32

LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree

advapi32

RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.code
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ