15584883ecc31b0991c813ddaf78ad5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15584883ecc31b0991c813ddaf78ad5c_JaffaCakes118
Size

51KB
MD5

15584883ecc31b0991c813ddaf78ad5c
SHA1

acd2cf79f97a84df165a158927da78e6760c7183
SHA256

e6381305964ed4d49b2bbbde3896d615b6d3476c1aac64e5968922075fbeec39
SHA512

e483a79e00ccd4c2667ed4c918801bc624e14d523d6316919f2a76b80d16cf1b1e2174e29c768f1476b804022003b13c5ae089e11d1f4cbb4a23a6180a800652
SSDEEP

768:L3LL8uwsUmUOb7liEsLAd0ybmAq1ZEisn5pe8wPDvBXAv:b8WUmUOb7IEs8dVWLEiOpe8oAv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15584883ecc31b0991c813ddaf78ad5c_JaffaCakes118

Files

15584883ecc31b0991c813ddaf78ad5c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e91c94b4885dc97b81061213ef46c3d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetLocationW
UrlGetPartW
UrlUnescapeW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
GetDC
SendMessageA

advapi32

RegFlushKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.V
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ