abbe6d4752cf3e494093493fe4315175_JaffaCakes118 | Triage

Sharing

General

Target

abbe6d4752cf3e494093493fe4315175_JaffaCakes118
Size

62KB
MD5

abbe6d4752cf3e494093493fe4315175
SHA1

989d2874ff222951d6f37d03192b9fcc99e91a22
SHA256

66bbfad8f6172793cceffb12510724792024e4c1f6e686563bcf57724527bcaa
SHA512

03487c885857ea9d67891f83db45e6913a2f8775b8110c162b3c9de790499fea721803a77a80c215bc8a429d7652ac1705646a60cb181041b1ad00104b2aa893
SSDEEP

1536:nKKOreo3y1611yNcmkSFbkJ/hDVwnlDO5CA996j:KKU3E4yySFbu/hyFOSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abbe6d4752cf3e494093493fe4315175_JaffaCakes118

Files

abbe6d4752cf3e494093493fe4315175_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3d272a52023a5a920a3b4cb5f29185b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetFocus
DestroyWindow

kernel32

HeapFree
GetVersionExW
ExitProcess

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ