01666451702b3bcde930d702be3e0c85_JaffaCakes118 | Triage

Sharing

General

Target

01666451702b3bcde930d702be3e0c85_JaffaCakes118
Size

130KB
MD5

01666451702b3bcde930d702be3e0c85
SHA1

5005b9a2559ed9da6c6dc2a75d0920d2c7a2b094
SHA256

e8b1fa207039135eb1d408d401eb3e9d04ffeb454b7b5550e7ae46309e49b74e
SHA512

ad8ee00f5b086b9c490be3e900ede187f0bb7fbdf6ceaa3682bee98d72a20ab34a4c5d71ce4de18c08fd3e447e306463f50b8b3ea870b691ddd791c6a654bfb2
SSDEEP

3072:jfpD9mc2ZZHs20AGLJwYk6G6nOGzrJ9zX8TeqY2YS9jX:vmc+VqLJ4By99L8TSs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01666451702b3bcde930d702be3e0c85_JaffaCakes118

Files

01666451702b3bcde930d702be3e0c85_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e041e2b961df9a8b600c746069215c2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTimeZoneInformation
IsValidCodePage
HeapValidate
GetTickCount
GetCurrentProcessId
GetConsoleMode
ExitProcess
UnhandledExceptionFilter
SetHandleCount

advapi32

RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ