3a03140de9202b741f457fb596794c38_JaffaCakes118 | Triage

Sharing

General

Target

3a03140de9202b741f457fb596794c38_JaffaCakes118
Size

165KB
MD5

3a03140de9202b741f457fb596794c38
SHA1

f121fc8b185e49a963ebea4b25ee9a4333266d71
SHA256

69f504dde7745f18f83bc5a316009ecb21a0dd6b1b5f8be9b60d2782e9d35950
SHA512

609902bf7b6ad652a2c9fda6a1144f91830e03bfb5b7658b6a27c21c00145826d02e4e10deefbdac000ab03470d6a58552742b436acde1c829be62ed205becd3
SSDEEP

3072:eCEOfkTPt9WSnOLJmhkAkHJSvTCuxqr40ro3qko2coLRsvUCR:eCEO8V9WSnOln1HcLXqr40U355LRsvUc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a03140de9202b741f457fb596794c38_JaffaCakes118

Files

3a03140de9202b741f457fb596794c38_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5eddc451a8fd7e00eb4731d356a3225e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterWindowMessageW
DefWindowProcA
IsWindow
RegisterClassA
CharLowerW
DestroyWindow
UnregisterClassA
CharNextW
SetWindowPos
GetWindowLongW
PostMessageA
SetWindowLongW
MoveWindow
LoadStringA

advapi32

InitializeSecurityDescriptor
IsValidSecurityDescriptor
GetFileSecurityA
InitializeAcl
RegEnumKeyExW
GetTokenInformation
GetSecurityDescriptorDacl
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
SetSecurityDescriptorDacl
GetAclInformation
RegCloseKey
GetLengthSid
AddAccessAllowedAce
RegEnumValueW
OpenProcessToken
GetAce
RegDeleteKeyW
CopySid

Exports

Exports

uiqeFEXhK

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ