0ffcaaacc3c41186fed1327e0c164174_JaffaCakes118 | Triage

Sharing

General

Target

0ffcaaacc3c41186fed1327e0c164174_JaffaCakes118
Size

95KB
MD5

0ffcaaacc3c41186fed1327e0c164174
SHA1

3973a620b173965e725c1bc7b47306e9d6a19cf7
SHA256

d77d908009c3159a4674e7a89e86b3a6d978fb7dce633fe47cc14daa8dbf5956
SHA512

e0dda2d6a8fd1d316bf14e850a6deca9ea1f210ad17717f1e7633d69eca5f636b1d06734d1da3464ab2e1d5d5b845a09cfa83535d3fb6032741e810de98bc2c7
SSDEEP

1536:Rcs1M6H8A6QG2wwt7PIhKxefyICZlgooFKDgsmPI9W59a8FVMBDjN0eo7CkyPRSw:RLfH8A/G2w0GKxQeCLKDbkI457MNJ0eP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ffcaaacc3c41186fed1327e0c164174_JaffaCakes118

Files

0ffcaaacc3c41186fed1327e0c164174_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6b0ddd15c3908d104f0671a334b06b97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
MessageBoxIndirectW
GetMessageW
FillRect
EmptyClipboard

kernel32

GetTimeFormatW
ExitProcess
InterlockedExchange

advapi32

RegOpenKeyExW
RegSetValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ