f0cbedaf95bf74af948833a921b67b80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0cbedaf95bf74af948833a921b67b80_JaffaCakes118
Size

60KB
MD5

f0cbedaf95bf74af948833a921b67b80
SHA1

158726e54701959255fcea8ad43228a88896607f
SHA256

dfad31798ccc32d7c1a472524a46923c7f0cea90027148532c43d2f91f8732cf
SHA512

e0e1021199d2a40c8a977f547168adc38c60cbfbe2b8fd43737c2936d7946d8cd4702157c08edf270a1bf38ee97502414601e8f6d670703817c25f21e25ec233
SSDEEP

1536:ko8ixEu2ymiUPnCEvua93sLXLU2FPVyQi0ln:kvixAyhaCUu9TLvV5T1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0cbedaf95bf74af948833a921b67b80_JaffaCakes118

Files

f0cbedaf95bf74af948833a921b67b80_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0380a00e9a00ffdc03a97c8241595930

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
FillRect

kernel32

LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree

advapi32

RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.code
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ