b09588c46ac9ea58ce79c4f9c8e3e185_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b09588c46ac9ea58ce79c4f9c8e3e185_JaffaCakes118
Size

88KB
MD5

b09588c46ac9ea58ce79c4f9c8e3e185
SHA1

2aef66c6971ba9060747754e875b6a216d1f579d
SHA256

508c8c5319053b78f07fdb33333c41ab7369770d4cc104273cb63ff7112c8565
SHA512

2ed4f3149beced36c8fa3ebd240c377c031132cddf92ab285021e99a2266cbb72e5593c3ba170b7703d6916a9608f75e6b81164663ae9596cc8e753fa768b85f
SSDEEP

1536:h8K0goWMHO6+87+i6lAgybHZDzjSO0/bAjrBIx3iK4AYevC6kED39PiE++tQ9:invzuQl6CgydnjSO0uW3ifvHW39RNe9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b09588c46ac9ea58ce79c4f9c8e3e185_JaffaCakes118

Files

b09588c46ac9ea58ce79c4f9c8e3e185_JaffaCakes118
.dll windows:4 windows x86 arch:x86

05efbdfc32359394e7d10a06376d8736

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetFocus
GetMenu
GetCursor
EndMenu
EnableWindow
EnableScrollBar
DrawTextA
DrawMenuBar
DestroyWindow
CloseWindow

kernel32

FreeLibrary
GetTimeFormatA
ExitProcess

advapi32

RegOpenKeyExA
RegSetValueExA

comdlg32

GetFileTitleW
GetOpenFileNameW

Sections

text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ