c7bd6172ea9f8c51009692d8d6cc86cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7bd6172ea9f8c51009692d8d6cc86cc_JaffaCakes118
Size

98KB
MD5

c7bd6172ea9f8c51009692d8d6cc86cc
SHA1

45b8dbe4347ad3538298e49e60777695b9ca847f
SHA256

0dd10dbc96babb42a05580e28fad4079e62f9e01d97e69b10f715eb93347777b
SHA512

ce5b56dc144d2749efdd093fd64254f8de65c914d98b6381c9320c2d9f39913c1ee3abc9da65c6d6eade0625bbe935b4fdcdcbc5f15cfdabf37cf2d31ee5b757
SSDEEP

1536:u5TSMpFqVF7/+0OtTKyHmFfOADarXxN9OWZVidONxCEgF9WgM55yHriTfftHUZgo:meMpFoW0OBufTsNkmjOvxMXTfmZA9ji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7bd6172ea9f8c51009692d8d6cc86cc_JaffaCakes118

Files

c7bd6172ea9f8c51009692d8d6cc86cc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e041e2b961df9a8b600c746069215c2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTimeZoneInformation
IsValidCodePage
HeapValidate
GetTickCount
GetCurrentProcessId
GetConsoleMode
ExitProcess
UnhandledExceptionFilter
SetHandleCount

advapi32

RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ