96a4c7c95b1a02019be2a0e0a767eafc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96a4c7c95b1a02019be2a0e0a767eafc_JaffaCakes118
Size

51KB
MD5

96a4c7c95b1a02019be2a0e0a767eafc
SHA1

9dcbdc83f06b89f433a7a7f46997eae7151918ce
SHA256

d4f0488a5f7718328a864fc92374649151ffcede72814d1337ab6529df55539a
SHA512

0e3ddab6a90e5750ea87d33a4d7ad0339991ea196cdf1966b5d7fcd5843728ac09f487e323380a6c28e2f479518c9e5b7201820622135eeee1207cc183b3390d
SSDEEP

1536:QuE6JOjdLKEaJgvowBQesMN3jArYyUFOP:QuE6J/EXBQesWjQeIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96a4c7c95b1a02019be2a0e0a767eafc_JaffaCakes118

Files

96a4c7c95b1a02019be2a0e0a767eafc_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f3f980b3c50e4b2d40094a0208b87120

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAddBackslashW
StrFormatByteSizeW
PathBuildRootW

user32

DispatchMessageW
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
TranslateMessage

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ECODE
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE