622eb79e67da75ab1eadfb1083821427_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622eb79e67da75ab1eadfb1083821427_JaffaCakes118
Size

38KB
MD5

622eb79e67da75ab1eadfb1083821427
SHA1

3d526160cb700ee7639207211e4065c7cf89b1a5
SHA256

dba9187e33fd4a82e5713b30ebb4b0759fc377517a6a6ec1d320243cdc8ca717
SHA512

a74578abc4114e699a82e3ef72d4fda1b36d39e6a58f38c1961d7f6b0a9709225cbeb375ea45a6f065ec33ad9c167c946d33a16f2d2c4bb827e2ce73b06b251f
SSDEEP

768:rVR2KOumXNC16XZ2vzZEPOOEYw3JV04i1uenld:z2KOuNFLEOOEYCj04Feld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622eb79e67da75ab1eadfb1083821427_JaffaCakes118

Files

622eb79e67da75ab1eadfb1083821427_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b9a2a179dfc8495b09d28f93cda43ad5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetPartA
UrlGetLocationW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC

advapi32

RegCloseKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ