8c5ca6489e41df9d169213365903c386_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c5ca6489e41df9d169213365903c386_JaffaCakes118
Size

88KB
MD5

8c5ca6489e41df9d169213365903c386
SHA1

7b616281a47498ac062419fa6e9e45276ace3ec0
SHA256

7aaf4d37d45a9ad579053916168f57213a70f304f60dd3da0d5eb8d1e1f16f26
SHA512

8a4c5fedc605385f2b42c4c7c5f323f1393b74b8ed07d6d7a32becd03e88c9e474235f19c38a72a55499796d481a9883cd9db1918f96fb3a0c90615e12a50bed
SSDEEP

1536:cipqawpCLCOUxuaM2Mk5iNOKqSFZwyVMZSLv2e36rt5U0ESG9+NU:5qDxMe8XFkix36rLMxA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c5ca6489e41df9d169213365903c386_JaffaCakes118

Files

8c5ca6489e41df9d169213365903c386_JaffaCakes118
.dll windows:5 windows x86 arch:x86

14ba07fcc1401587b97e395955f0978e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlApplySchemeA
PathAddExtensionW

user32

MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE