3c8e71f553ff3d42d887bccd15b013d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c8e71f553ff3d42d887bccd15b013d8_JaffaCakes118
Size

55KB
MD5

3c8e71f553ff3d42d887bccd15b013d8
SHA1

ffbaabfafee6589eae6bc099c6d4060b420ffcf5
SHA256

925c7c04981bfe299b64d5b15ba6389552725cc1395ca430dcdfb596bccd9ead
SHA512

a067ac8776d0a814f32f21867dce54b424e905879ae42966435ebe491b8ec10ffcfe757926c8cd3132c82711a9462500473a9feffec6eaf5543ed09161454dac
SSDEEP

768:Z/Cte0GWAjzbF77VcF1TuWia+4QvQRr0pWc7X5c0095Aq:Z/ae0fAHbTa2jS0dW6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c8e71f553ff3d42d887bccd15b013d8_JaffaCakes118

Files

3c8e71f553ff3d42d887bccd15b013d8_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f372811452738e6fe7310db511d73972

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrCatChainW
UrlGetPartW
UrlCombineW
UrlHashW
UrlEscapeA
UrlGetLocationW
UrlUnescapeW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RR
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ