23c579edb787ad37b3067dac647f4b26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23c579edb787ad37b3067dac647f4b26_JaffaCakes118
Size

50KB
MD5

23c579edb787ad37b3067dac647f4b26
SHA1

12121962a8d5d86a03cc57bb894a2a6aa249a476
SHA256

e571f298afd3ab2de157d50be2b54ef6be779026c7e86cb5b5b5252b37f173b6
SHA512

f2360ddd1fbe535b1e02e101f50ebb3181b3de9abef1f573668c5580b8d5cf1341f5beb5f200235f2985a7debb42bfb1a6fa7b290c07e70f301bb559bee7fb43
SSDEEP

768:kqQ8DU02moTyt6mtZG0zXu14/DWkMCfyKM4jWGpttfPPbCRJu5O+Sgn:3Q02iHGCjffLttPmLu5UG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c579edb787ad37b3067dac647f4b26_JaffaCakes118

Files

23c579edb787ad37b3067dac647f4b26_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f3f980b3c50e4b2d40094a0208b87120

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAddBackslashW
StrFormatByteSizeW
PathBuildRootW

user32

DispatchMessageW
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
TranslateMessage

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ECODE
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE