553a3b1a7ee8d9aed14a134f973170bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

553a3b1a7ee8d9aed14a134f973170bb_JaffaCakes118
Size

143KB
MD5

553a3b1a7ee8d9aed14a134f973170bb
SHA1

a86d55ba322ba568e5bbcae688d6ef1b0588e78a
SHA256

deb40b35f4b538a25c7d3bf5dcfaada68fe906d2fae4958dee3895ec1d42b3ba
SHA512

6c1647d522199f95a4efa7d9ffcc103da88e124e9e14c0ba8d695b2b05fb9e678c5907dd68ab78a04effd3abc31a39a51fa37e31de75dfa7911a7943da6395d1
SSDEEP

3072:kEOwGfEHaBi6oU5Qm0C7bFQ/4YoLRsvUCj:kEOwGEHso6Qm0E5LRsvUCj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
553a3b1a7ee8d9aed14a134f973170bb_JaffaCakes118

Files

553a3b1a7ee8d9aed14a134f973170bb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5eddc451a8fd7e00eb4731d356a3225e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterWindowMessageW
DefWindowProcA
IsWindow
RegisterClassA
CharLowerW
DestroyWindow
UnregisterClassA
CharNextW
SetWindowPos
GetWindowLongW
PostMessageA
SetWindowLongW
MoveWindow
LoadStringA

advapi32

InitializeSecurityDescriptor
IsValidSecurityDescriptor
GetFileSecurityA
InitializeAcl
RegEnumKeyExW
GetTokenInformation
GetSecurityDescriptorDacl
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
SetSecurityDescriptorDacl
GetAclInformation
RegCloseKey
GetLengthSid
AddAccessAllowedAce
RegEnumValueW
OpenProcessToken
GetAce
RegDeleteKeyW
CopySid

Exports

Exports

BsyouFwTu

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ