321313daee7aeeb2423efcb28ba4e3d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

321313daee7aeeb2423efcb28ba4e3d9_JaffaCakes118
Size

52KB
MD5

321313daee7aeeb2423efcb28ba4e3d9
SHA1

b674ae4f6dce582b92bda81428e7248a704f0a75
SHA256

044ee9a736b93519d936998625d7909f419a626181086dbfecb529c6b0afd0f2
SHA512

99406e9b6d40245e10892381050898080d6faa0df7bafa8af7ec1eaf8c78ca7081b4031ee8933279cb6ae497e4baba3f3f010814b00025b0626d46c300e6ed1f
SSDEEP

768:40uLWxOi5RHRp4XzYTj2nPQ8v1FlIO4OJdN+gc4SSdaX7JKJPZTI:40xgqpYETaPQg1vIOVJdrIQq8Jh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
321313daee7aeeb2423efcb28ba4e3d9_JaffaCakes118

Files

321313daee7aeeb2423efcb28ba4e3d9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e2a26c641dc8f8587fe3c78b90a440f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlGetLocationW
UrlGetPartW
UrlHashW
UrlCombineW
UrlUnescapeW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
GetDC
SendMessageA

advapi32

RegOpenKeyA

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.R
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ