06252a14b251376d7630355972acc296_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06252a14b251376d7630355972acc296_JaffaCakes118
Size

332KB
MD5

06252a14b251376d7630355972acc296
SHA1

05cec74515c3acd259129fb0de7a52700bdb0eea
SHA256

66492436a4cbb3622c04e1c1e9b060e4f685c8cfafbfbda00183667429cf68da
SHA512

a081edc5227fc0f090ac0d289f408d4c3f007419fbecdfb045e0cd50599eb42ad1464a23a9efc5bc45c971189cd798fa2e0ddce34fc016e386edb1d25e818ceb
SSDEEP

6144:41EpCEEdqjoXGmpSMh06IkUILYvhAVFk1vJTzwiMBnUt13:JpXEj06BLO3TTzwI7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06252a14b251376d7630355972acc296_JaffaCakes118

Files

06252a14b251376d7630355972acc296_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fd0279b9cdcb1bb98f1a768ac2a99457

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHRegDuplicateHKey

kernel32

ConvertDefaultLocale
Beep
HeapAlloc
GetProcessHeap
HeapFree

user32

SetWinEventHook
GetMessageW
PostMessageW
IsDialogMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
UnhookWinEvent
GetParent
EndDialog
GetDlgItemTextW
wsprintfW
SetDlgItemTextW
SetFocus
GetDlgItem
GetWindowLongW
SetWindowLongW

winmm

mmioInstallIOProcA

Exports

Exports

uftoocu

Sections

.code
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ