94b630b7da3d6c1c52902b055b54e238_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94b630b7da3d6c1c52902b055b54e238_JaffaCakes118
Size

93KB
MD5

94b630b7da3d6c1c52902b055b54e238
SHA1

0dbb32e58c5b52d1bb703819dc6b4e765be4cc28
SHA256

2e1efb08229a70d7e46e08c6f0e06fe8456703984ec27c1b421842df0c7acd4f
SHA512

3e3b42d577860e6e30e98461ed0bb57821aaa5ca7f9624dd8b19b518d7ce4eca5660572a1e702e98a7cc835fb6255eda331f9762de556e8adceb076925be7d3e
SSDEEP

1536:j/qWSAEhCAJNwSWDzqpIh13L6fehLs04M+QEvE7AsrH0wIuE:zqWSAAJSbDuK7SehQTMHUswwIu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94b630b7da3d6c1c52902b055b54e238_JaffaCakes118

Files

94b630b7da3d6c1c52902b055b54e238_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f372811452738e6fe7310db511d73972

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrCatChainW
UrlGetPartW
UrlCombineW
UrlHashW
UrlEscapeA
UrlGetLocationW
UrlUnescapeW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RR
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ