0b80c40a7d0113faa83eafcc2a5ed2b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b80c40a7d0113faa83eafcc2a5ed2b9_JaffaCakes118
Size

96KB
MD5

0b80c40a7d0113faa83eafcc2a5ed2b9
SHA1

c98e2b47872841cb79afa33dfef2f559173c5c2a
SHA256

4b5a4a5e6d68f4f3ef76a5d991d1f7807af4e65debeefaf164e086ce99e4c2cc
SHA512

c4c8f66ea57f8b3039ecef261945a98ec056a73a5b1ed6fcb81d14a83d0c169aaddb866985c5756e0272f8a5f82f3f7ee82cbe4bc90d68f3e5e5b9f9e525549e
SSDEEP

3072:Q4iggn0pgKhPumWgvOq9nMdIS/0yaUr5KFB9jU:Q4qZKYmWgvOl/0vXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b80c40a7d0113faa83eafcc2a5ed2b9_JaffaCakes118

Files

0b80c40a7d0113faa83eafcc2a5ed2b9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8c0240a0c636518aa809766e32d8ace3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
MessageBoxIndirectW
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

HeapValidate
TlsGetValue
SetConsoleCtrlHandler
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
HeapCreate
GetStdHandle
GetLocaleInfoW
DebugBreak
ExitProcess
GetCurrentProcessId

advapi32

RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ