67218075ecff9f9b5022c3eaa9a03b3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67218075ecff9f9b5022c3eaa9a03b3b_JaffaCakes118
Size

51KB
MD5

67218075ecff9f9b5022c3eaa9a03b3b
SHA1

e9af9bc9643ccc89218b00b6a6b5efd2630769a2
SHA256

24ab28a35420a72b371041a1c276b4b0146d0db2660cf82af06a0c6d62240a6c
SHA512

f0ce33a583535e05e201f1526e0db1c480ae6dc668cd602c36ade48d385f89f47fc9fa47a5a3572dd43164ef0c8420105f05ec57b71766388ff8a70af730e6aa
SSDEEP

768:OmpToI39mOPQsPfndXBAMsirZRR1SwC9aFoVg:OgToI3kAQUdKdirNk9aI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67218075ecff9f9b5022c3eaa9a03b3b_JaffaCakes118

Files

67218075ecff9f9b5022c3eaa9a03b3b_JaffaCakes118
.dll windows:5 windows x86 arch:x86

ef2e2a1802facba2c81e2109a90d9b87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlHashW
UrlGetLocationW
UrlGetPartW
UrlUnescapeW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.R
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ