0e520a8a4230b1793ccf6a51b32c7214_JaffaCakes118 | Triage

Sharing

General

Target

0e520a8a4230b1793ccf6a51b32c7214_JaffaCakes118
Size

56KB
MD5

0e520a8a4230b1793ccf6a51b32c7214
SHA1

7ba4bce8aa1b0df5045842415ee750675509714a
SHA256

f6f30b32497f89cefa4b08f305fa3e1df0f775be87810ef328f3b675b203841c
SHA512

5de76a3d5d1b1f6b372b5bab162aa45adeebde33051f129e132230bdd69761d8fd1fcca793152aa5d6c35dd7514b68707be39e9f1b88157098f61421a2ccc3a5
SSDEEP

1536:5jzo6xaMGrIChbrJJi7EcUr+Pi9OYT4jCHp9v3hv:aaGUSfJJY89quf3hv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e520a8a4230b1793ccf6a51b32c7214_JaffaCakes118

Files

0e520a8a4230b1793ccf6a51b32c7214_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1a7c45fc327025cccf6d19a02df8176

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetCurrentProcessId
TerminateProcess
Sleep
LocalAlloc
LoadLibraryW
FreeLibrary
ExitProcess
DeleteCriticalSection
CloseHandle
CreateFileW

advapi32

RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ