daa9e25644a554aeddb5a0fcf1127cf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daa9e25644a554aeddb5a0fcf1127cf5_JaffaCakes118
Size

62KB
MD5

daa9e25644a554aeddb5a0fcf1127cf5
SHA1

36b73c55f36cc031ab5872e95d9d2d08810814e0
SHA256

188e41ce045484ff3300c22ed6d98883a4f0a65d817cfba27a9f651c9662a20c
SHA512

9cb269b3ec0ba473fa717413d3548c96b08c93bfefb27e5df8e70da0681cda41fa20011de806762b258971855674465b350eee1ad87dafb50e37146088333899
SSDEEP

1536:/5ecr7bA05eJvW8dflYDOXfjf9m3DQl93a7qLSNWn9jN:B7s05MvW8dflYmfJaEDa2WIn9jN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa9e25644a554aeddb5a0fcf1127cf5_JaffaCakes118

Files

daa9e25644a554aeddb5a0fcf1127cf5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ee6f83f16c8e4cba8f886ef6dbef2590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
DispatchMessageW

kernel32

InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
RtlUnwind
LoadLibraryW
HeapFree
GetVersionExW
WriteConsoleW
ExitProcess
GetExitCodeProcess
TlsGetValue

advapi32

RegSetValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ