2bc0b458eef61f70892b3c8201eef7e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bc0b458eef61f70892b3c8201eef7e8_JaffaCakes118
Size

63KB
MD5

2bc0b458eef61f70892b3c8201eef7e8
SHA1

3cc76289a2db9a802317be4fb5430f4384183450
SHA256

536363d60a9a2f799f816585d8f4c7a928fbf48ffc692e5098acf2fc81a2fd7f
SHA512

6c6de7d1dea5dc571cfae1e303cb96b167a14768ec38119e39e230400c9e58523e273162abc5878fb81b37bce540b99f571d01c0d4d11754a60a0be11ca20e4a
SSDEEP

1536:S5J8Kt2bIIgz5ezeYOLsRFWrdhYc9jWON:L02nD7Oq2Sc9jD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc0b458eef61f70892b3c8201eef7e8_JaffaCakes118

Files

2bc0b458eef61f70892b3c8201eef7e8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1dc948a256cf1da9cdb42389386d691

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetOEMCP
InterlockedIncrement
GetUserDefaultLCID
GetConsoleCP
FatalAppExitW
ExitProcess
lstrcatW
SetEnvironmentVariableW
IsDebuggerPresent
DebugBreak
IsBadReadPtr

advapi32

RegOpenKeyExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ