00047a1c58d8ef2ab7c1b454bd4828cd_JaffaCakes118 | Triage

Sharing

General

Target

00047a1c58d8ef2ab7c1b454bd4828cd_JaffaCakes118
Size

72KB
MD5

00047a1c58d8ef2ab7c1b454bd4828cd
SHA1

a2c292962d03eeb4a9d6a4dde2873092a245ac6f
SHA256

2ee371a4885eee1a63c9387ed3afab62e3b7179433ad24269e5afd4dfcd65108
SHA512

73fc715301875c7d0ac365333abf198542294df3399456708a97adae3d8585b1712067be5d0b32580afaaed0c8fa10cf106b7419b39f31c559a3b55c3fc6d8c3
SSDEEP

1536:NtEE+4RDZ/5IKsBHZIF3KFrI801bGnF7ov/KnBdEknE:3EE/RDZxIvZZ4ekXbGF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00047a1c58d8ef2ab7c1b454bd4828cd_JaffaCakes118

Files

00047a1c58d8ef2ab7c1b454bd4828cd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 92KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ