146c72828175526e09064857db2be5a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

146c72828175526e09064857db2be5a5_JaffaCakes118
Size

55KB
MD5

146c72828175526e09064857db2be5a5
SHA1

9debb7f08efa71a2524dc70b9c5dda410a1cb9fd
SHA256

81843d34ea083f32e450d454b8326d86d5acf9c02511dcc1cb3764ed44ac1432
SHA512

c26e7405a5f5865d88534204750f7da81ce08f098d52ab6c3b5691038d8d3e78c06715547351df1e7639a56c6f4474fe183777c0576b193edc24fd39b9dbff75
SSDEEP

768:Nos4AsNUzi7d/F1E3gJZJwGBtaKn/PrSvEYW5peM1ovi/ICe:Nogw7dN+3gtaY3rSc7eM8CICe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146c72828175526e09064857db2be5a5_JaffaCakes118

Files

146c72828175526e09064857db2be5a5_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f372811452738e6fe7310db511d73972

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrCatChainW
UrlGetPartW
UrlCombineW
UrlHashW
UrlEscapeA
UrlGetLocationW
UrlUnescapeW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RR
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ