8e323eb33450d9293cc7cffb9d8e7ced_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e323eb33450d9293cc7cffb9d8e7ced_JaffaCakes118
Size

51KB
MD5

8e323eb33450d9293cc7cffb9d8e7ced
SHA1

259acbab93006c1087c1b9e3a7928610fa60f5bf
SHA256

897316ad0f510012bdfd5d95eea82328e1105dadf97355279f3b6870febe6f35
SHA512

db6d7b392f963988d7c51ca198bf5b1c601d34e869642d0a5ce259599cc084e61b3afee0f6a817e7532c33e62ee971498c3054868a0a5f94997d62347dada0c3
SSDEEP

1536:0MsP1V+JbiGNKgW72f9/k44mj2YVA5h1J+vV:7sP6JbiGwgWklj26A5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e323eb33450d9293cc7cffb9d8e7ced_JaffaCakes118

Files

8e323eb33450d9293cc7cffb9d8e7ced_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1f61fe8e8af19bce962645bf30fe7fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCreateFromPathA
UrlCombineW
UrlGetLocationW

user32

TranslateMessage
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
DispatchMessageW

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ