4a14c2001685e8372fb788793f02301e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a14c2001685e8372fb788793f02301e_JaffaCakes118
Size

54KB
MD5

4a14c2001685e8372fb788793f02301e
SHA1

2ac012fc13ae52a44e4334038e5333e137123e8f
SHA256

ffe525ebbce7bcf6a1f4efb7a0d5d2224119e58a926e6188ce41f523e9f43a7c
SHA512

28e0841bcbce8088c9098bbaccdd49eb552a500586fe357c7f05b3dc4e1f52b877f19e5da2cd78c91984349b836f55ec1b2ac8e97431e4bdcf60a25670e72b3e
SSDEEP

768:vQEuMb2chO0nUW/Gp0fK7lj9wHrftWg/9J9B+rHT0taC9ZSo:vjuinP/G+fK7RWWQcz0oUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a14c2001685e8372fb788793f02301e_JaffaCakes118

Files

4a14c2001685e8372fb788793f02301e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f372811452738e6fe7310db511d73972

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCatChainW
UrlGetPartW
UrlCombineW
UrlHashW
UrlEscapeA
UrlGetLocationW
UrlUnescapeW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RR
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ