c77fe2fe1643b45b6cf3f1193340f590_JaffaCakes118 | Triage

Sharing

General

Target

c77fe2fe1643b45b6cf3f1193340f590_JaffaCakes118
Size

63KB
MD5

c77fe2fe1643b45b6cf3f1193340f590
SHA1

c685ad3f599c12df8ec2ca15bd111945b843cb13
SHA256

545cb69bf644c9fe6c040ee7d57d5082db5facb1e6cdc5d086cc4ee464979d92
SHA512

0d2d49d54de7cace267e2a19e3a230a8595f7245065d2af1e11ab89bdec4f3e9efdf6e96b1866639ba2fc6b7bb963344f2857777ccea3d32eb412e0f18d98465
SSDEEP

1536:DJUXg84vocdFxNg0ICUQtN9cGv8laP29j+Z/89jP:p84ZFngfiFjvsaO96Z/89jP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c77fe2fe1643b45b6cf3f1193340f590_JaffaCakes118

Files

c77fe2fe1643b45b6cf3f1193340f590_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1a7c45fc327025cccf6d19a02df8176

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetCurrentProcessId
TerminateProcess
Sleep
LocalAlloc
LoadLibraryW
FreeLibrary
ExitProcess
DeleteCriticalSection
CloseHandle
CreateFileW

advapi32

RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ