172865e42a8dd19edf346708b87b2f84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

172865e42a8dd19edf346708b87b2f84_JaffaCakes118
Size

60KB
MD5

172865e42a8dd19edf346708b87b2f84
SHA1

8ffc91680ba131e33b7147399a5a17b935bb38d3
SHA256

eb52f456311bb97705ad7c70ea79e5126dbacd8484677d6cc88104ef94a1da75
SHA512

c57d5cc4534842b7b09f17a206f17f92f68fc0c943a7a6b8555892db518167d8b6f187e97b8d58d4701e8851c288b90867db776869aae88d1604c7cdfe1b5aa6
SSDEEP

1536:Xo36nDpZ7NlgV7g5AZVxNu7mns3d+Rs1QgRMjXf62:hpBgV7geVTdjP62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
172865e42a8dd19edf346708b87b2f84_JaffaCakes118

Files

172865e42a8dd19edf346708b87b2f84_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c5390a8a383227d9f1b222ca6dbdbcb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTickCount
RaiseException
GetOEMCP
ExitProcess
WideCharToMultiByte
lstrcatW
SetStdHandle

advapi32

RegSetValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ