a3fa6936f33462537201fe782a867819_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3fa6936f33462537201fe782a867819_JaffaCakes118
Size

63KB
MD5

a3fa6936f33462537201fe782a867819
SHA1

93a103c25c5669232e2feffbafcfd6a36b42ef3a
SHA256

7bfce76f4784dd3db468ccaae2fd73c0f664aa2e61046b763846820d1fdd4d7e
SHA512

52e0423abd54809c1027bdb5166223e16a5ce9ba6d864076fe5fc03fdb148d021c5745b9dd333f809e1f2c98121f1b8e458119dfa29352f9a646fe7e3ce00308
SSDEEP

1536:h3ZA1CEz9clkzaOPX+ogrjAqCMyFlztla0gPIUkt9j4+:h3ZnAilkzajxjAqCMkzWPI19jr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3fa6936f33462537201fe782a867819_JaffaCakes118

Files

a3fa6936f33462537201fe782a867819_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6ff1543d6d95b6dfc2ab26330fa5ba84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
EmptyClipboard

kernel32

InitializeCriticalSectionAndSpinCount
TlsAlloc
TerminateProcess
LoadLibraryW
HeapSize
HeapFree
WaitForSingleObject
CloseHandle
DeleteCriticalSection
ExitProcess
TlsGetValue

advapi32

RegSetValueExW
RegQueryValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ