27089d545cc76fbada1fed0475909d49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27089d545cc76fbada1fed0475909d49_JaffaCakes118
Size

90KB
MD5

27089d545cc76fbada1fed0475909d49
SHA1

f862e6f47671134c90ff4663f71b2ed9ec4207c3
SHA256

0a6db0bec411d2e08ab6857c5dec3dad3311930829c5fbd01ce409ea23148fff
SHA512

ebf5036473afc6c9b9ee2cf1fffef182cb01d0f3c4b6c84af939b2e916c14f74a7cf75c9e19f21a8d21f809d7873c1f3a075677feeea464c6b7058c26d45d55d
SSDEEP

1536:ioPJu7/xJkhptT+cPyVR2twaoyUK2bNppewEoI5nyqIdhlr0GWtmGqksdt2nxR:a7ZJkh/bP0iwaoPBDewuWxr0ikwt2x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27089d545cc76fbada1fed0475909d49_JaffaCakes118

Files

27089d545cc76fbada1fed0475909d49_JaffaCakes118
.dll windows:5 windows x86 arch:x86

26c2ac6ea7446dc47b7bc56894882c9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCreateFromPathA
UrlCombineW

user32

TranslateMessage
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
DispatchMessageW

advapi32

RegCloseKey

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ