15532ef2e587a17f2b1c2ab4e4626cee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15532ef2e587a17f2b1c2ab4e4626cee_JaffaCakes118
Size

130KB
MD5

15532ef2e587a17f2b1c2ab4e4626cee
SHA1

25384d857b83bae1217e83bc11deba1b1bbd2091
SHA256

2449341ee3044a686194e17511e9338dd87336b670a919c54467a7cf15dcb924
SHA512

c041d268b6d2e2f2aa3c98036ea60be893eba50c1e0becf7488e4b010e436d44cd67a51641b055a94b3684ba7a7dfe036dd065d204a919e487e29dd949696cd4
SSDEEP

3072:X1pGPqBc98Np1w0RaM/bacE/5LccNTHNIb8vRdYh6bXIRKn9ju:SSB39nRn/bQFccNH6wvgsrIRKw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15532ef2e587a17f2b1c2ab4e4626cee_JaffaCakes118

Files

15532ef2e587a17f2b1c2ab4e4626cee_JaffaCakes118
.dll windows:4 windows x86 arch:x86

04ca92fd91d242dffdbc2dabd9f321bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetStdHandle
SetConsoleCtrlHandler
LoadLibraryW
HeapDestroy
GetExitCodeProcess
FatalAppExitW
WriteConsoleW
DebugBreak
EnumSystemLocalesW
ExitProcess
TlsSetValue

advapi32

RegQueryValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ