87e9d4d6f37c81355ec5de7594a48758_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87e9d4d6f37c81355ec5de7594a48758_JaffaCakes118
Size

128KB
MD5

87e9d4d6f37c81355ec5de7594a48758
SHA1

977aa5486d7b715a92f49a96c19abd7a860d0cb3
SHA256

c336a6d2f78da983e6ea3b22b0c0cf91c5634d5f8bb09d5b8fb42c37e49d27a7
SHA512

e0778b2cd0537047b50baa3a5225dc8afb392f60d5f344967d8c2735c20d4b5bd7b8fe38b615f4eb436ee6136b02f80e98e437b8f6ec91a2b65313ea05fd5685
SSDEEP

3072:Sfp27zUPcaixawfvWcSj2AFhxeIx/2OxXmKXZ9j3:SxbPcayaem9Fxx/2OxFXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87e9d4d6f37c81355ec5de7594a48758_JaffaCakes118

Files

87e9d4d6f37c81355ec5de7594a48758_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3d6165baf809dd6e155995eb08c5ca30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OffsetRect
MessageBoxW
MessageBoxIndirectW
GetMessageW

kernel32

HeapSize
QueryPerformanceCounter
LocalAlloc
HeapDestroy
ExitProcess
FreeEnvironmentStringsW
GetCPInfo
HeapCreate

advapi32

RegOpenKeyExW
RegQueryValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ