81f01e0c5ccaacaeecd27ba4a1ce5eb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81f01e0c5ccaacaeecd27ba4a1ce5eb4_JaffaCakes118
Size

90KB
MD5

81f01e0c5ccaacaeecd27ba4a1ce5eb4
SHA1

45c2866aaf6467c893f114d3871d0c97d745ee99
SHA256

5b383e916982d40e026bb472f13af328e8b4a52ab628c9d230142947fdf26086
SHA512

2ca5981d52c05cafa3d6b22e76f2582459334b4e8f0c2225fa72a9c2bbd07322493d8f4d7c96cdb397f96a0aecbf8b92dffacbb50f123d441489ad26c74ebebe
SSDEEP

1536:iwxugozNe8JlBpFgPIf1ZZ6/NJIRiwk2FhB8Tw/VXu42YDUU4KH6rZny9o4lX:iwxugozQuFIW13yDwk2NkEhuMf4Ka1n8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81f01e0c5ccaacaeecd27ba4a1ce5eb4_JaffaCakes118

Files

81f01e0c5ccaacaeecd27ba4a1ce5eb4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1f61fe8e8af19bce962645bf30fe7fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCreateFromPathA
UrlCombineW
UrlGetLocationW

user32

TranslateMessage
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
DispatchMessageW

advapi32

RegCloseKey

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ