71eb2e5166a25fa2b13e979106fb7f43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71eb2e5166a25fa2b13e979106fb7f43_JaffaCakes118
Size

51KB
MD5

71eb2e5166a25fa2b13e979106fb7f43
SHA1

2547e65b8155df87f4e00a976be85ec33f7a206f
SHA256

f5c69d7ee70cadc5f4a34e07341eec5a16fbe5edad2eccb1da19a7bd6082b410
SHA512

af67e8859693d61856299a832e43108ed657f0d14240aa18fda967694923d832da9a656023056e27a99080808ffd67458cb58c50fca3b67e0a32d525cd36843d
SSDEEP

768:vu7C4g0dnjtYJ3BZJg8LbXJTL3h9BGhUT2eD0fcwYTqaMy4r:vSC42RZewb9yUj0DFaqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71eb2e5166a25fa2b13e979106fb7f43_JaffaCakes118

Files

71eb2e5166a25fa2b13e979106fb7f43_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e2a26c641dc8f8587fe3c78b90a440f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlGetLocationW
UrlGetPartW
UrlHashW
UrlCombineW
UrlUnescapeW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
GetDC
SendMessageA

advapi32

RegOpenKeyA

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.R
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ