889988eafcd86a616b805970abb5fb54_JaffaCakes118 | Triage

Sharing

General

Target

889988eafcd86a616b805970abb5fb54_JaffaCakes118
Size

90KB
MD5

889988eafcd86a616b805970abb5fb54
SHA1

0947b3fc9a57ed6b24ff90295e2b38c8322bfa19
SHA256

ac7e1e62e4b565b3047b83e13f3183ff5cadabc18dac9ca2daa5ea7645e006ce
SHA512

c22ad5ccddbda6da76c497024dea63148d763e1729ae173980c00418fbed6fbd998fa072061dd8d13f20862221b23c546cdcb463735ec9200c5aa386cf1301fb
SSDEEP

1536:qRV7LsgnnSTJmKAgV6RF3oXEqaeuPhV+YSsDRh/wB01oMqaac4SIaNbu:a7AgnnGmNv3oXi3V+YJDRh/wrcBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
889988eafcd86a616b805970abb5fb54_JaffaCakes118

Files

889988eafcd86a616b805970abb5fb54_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1f61fe8e8af19bce962645bf30fe7fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCreateFromPathA
UrlCombineW
UrlGetLocationW

user32

TranslateMessage
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
DispatchMessageW

advapi32

RegCloseKey

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ