3b79aceafbcca0eeaa1c748d32f8d200_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b79aceafbcca0eeaa1c748d32f8d200_JaffaCakes118
Size

42KB
MD5

3b79aceafbcca0eeaa1c748d32f8d200
SHA1

67124ed7dc63ffb9c08242027360acd7cc11182f
SHA256

18397e2742056fd556fb2fc09ecd174a5ec80398bada3f2eb66ee9614f87ad0e
SHA512

3844ca6a78936df93169cc6b539d7e56f49e3bf8be9dd5bfe459f8ea339d274fe121e77464a26bd685e400fae319b01e0f25767a2b83a0646f2190813fde7e8c
SSDEEP

768:DQG7wCCiR0gygMynU9py2fgKJffY977a4B7OZ:DQG7wCCW7ygZg/gKJf2vB7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b79aceafbcca0eeaa1c748d32f8d200_JaffaCakes118

Files

3b79aceafbcca0eeaa1c748d32f8d200_JaffaCakes118
.dll windows:5 windows x86 arch:x86

9f4102a47fb1a87039e7c543fb9b6c4a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlGetLocationW
UrlUnescapeW
UrlCombineW
UrlHashW
StrFromTimeIntervalA
UrlGetPartW
StrCatBuffW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RR
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ