1b8423da0c8f6161d3c4558839f3bef3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b8423da0c8f6161d3c4558839f3bef3_JaffaCakes118
Size

51KB
MD5

1b8423da0c8f6161d3c4558839f3bef3
SHA1

cc2c59884d69c4017e02f3e6192400365e0f4dd2
SHA256

5ce36e96b63b62a1f1bd45195e576738a6e2c732f998581ee571698f30faea3b
SHA512

d0f58eb4080808078fb99bdfc2190ae84b3028f8fa54c557efb1cebe083411997324dbb277761e99fbce5d78b9235e6ad95a88eb0199eb5cb142311eb4987539
SSDEEP

1536:dHof+dfLgpu5JRSkxMDiweOLststIPjb9ip:dIf6AQrSkWBsKtacp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8423da0c8f6161d3c4558839f3bef3_JaffaCakes118

Files

1b8423da0c8f6161d3c4558839f3bef3_JaffaCakes118
.dll windows:5 windows x86 arch:x86

ef2e2a1802facba2c81e2109a90d9b87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlHashW
UrlGetLocationW
UrlGetPartW
UrlUnescapeW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RR
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ