49cdf491cb7209b71908a88d003be8d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49cdf491cb7209b71908a88d003be8d9_JaffaCakes118
Size

90KB
MD5

49cdf491cb7209b71908a88d003be8d9
SHA1

e6a78907d7182d6085d826a856d2ab31fb210763
SHA256

9edd9d039a1b1ae16a1b566ca0dc7e52c461102ebd0f38ef2bafec36493b088e
SHA512

d937beb6bad12089d19747523dda95367c74caa98e2d49b3855055031bee96fb0143eb18775ff5a7a1610e075dcd4a8452405ae1dce5183f0606df38c7be7c9a
SSDEEP

1536:xI57Yfh7xNIkC/1WXpTf2A3uJmMvSvpDyheu2015+5UKDIFOsbEu/0k:COIN1WZjKXvSvpweu2015+aKDrp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49cdf491cb7209b71908a88d003be8d9_JaffaCakes118

Files

49cdf491cb7209b71908a88d003be8d9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1f61fe8e8af19bce962645bf30fe7fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCreateFromPathA
UrlCombineW
UrlGetLocationW

user32

TranslateMessage
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
DispatchMessageW

advapi32

RegCloseKey

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ