7836831eafa78f11c352cc3e0f00ad63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7836831eafa78f11c352cc3e0f00ad63_JaffaCakes118
Size

62KB
MD5

7836831eafa78f11c352cc3e0f00ad63
SHA1

5c04e825eaf9bf760fc1d4a43a042e64bde96091
SHA256

819ab18d44ecceb9af7d2d65c90f91471cea21adf77ac51fe276ba78acc10fdf
SHA512

fdb0dcaf4bd773895d6747f541dbf4304972dbf9f478eddca7db9305fb7e974f4b3b045bd2f8b8ce8467f67bb345de9effd8af0095c2d6e755754fbcd7e64e00
SSDEEP

1536:kbk4JSqgtrR1IGMlCwnW8iUZOgYQc25Q+uHFodnQr/2s9jex:kbk4JSqYrRNMlCwnDirt2i+eoVQrL9jO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7836831eafa78f11c352cc3e0f00ad63_JaffaCakes118

Files

7836831eafa78f11c352cc3e0f00ad63_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b76bd0b888430e1d7602832f7ef80c52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard
DispatchMessageW

kernel32

GetUserDefaultLCID
GetLocaleInfoW
ExitProcess
UnhandledExceptionFilter
SetEnvironmentVariableW

advapi32

RegEnumValueW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ