71d417ad68fabc8395c280c217a15fb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71d417ad68fabc8395c280c217a15fb8_JaffaCakes118
Size

51KB
MD5

71d417ad68fabc8395c280c217a15fb8
SHA1

45f5eed86969e12a0c332d1a166b0119e34b8e63
SHA256

ecd52a6f412e085b59b9d4a4f967399000a6e10157c7bfe1312fac84d5e3b11a
SHA512

abeb3dbb9750f5aeb6ce7ae4ff0d77a5a4b8ab6741f9b87c480066c489494ed5c72e6d7b9cf2edc610ff035a1bf3841e202ce0d0a93ac93816187ba636f307f6
SSDEEP

768:Srxn20Gf6ifYz4YTK4nZDkgVYJ4NghNRpk/ErNEzpHYOfZpbnxwst:4n20wfYzV+4AV44vprJKHYGZpjTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71d417ad68fabc8395c280c217a15fb8_JaffaCakes118

Files

71d417ad68fabc8395c280c217a15fb8_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f3f980b3c50e4b2d40094a0208b87120

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAddBackslashW
StrFormatByteSizeW
PathBuildRootW

user32

DispatchMessageW
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
TranslateMessage

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ECODE
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE