a4a72c2b7243705affb85cec190185e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4a72c2b7243705affb85cec190185e1_JaffaCakes118
Size

38KB
MD5

a4a72c2b7243705affb85cec190185e1
SHA1

b9ce15bfd2ec0a869902b0a2f75d5a3a06e1d426
SHA256

ff7f631a1983f684953754ce93f80959e5ed0c66610ba2e56c6d72c328a47ace
SHA512

f19d30977d7e3da08b313fc837d6c36d449a096885667d11eee7942c0d127beff51808aeaf44a4d10f935da26cb4b7e7f04c39ee8a547b4d100777f5a3b6a551
SSDEEP

768:sjsI4c5rX9axrx26DfwwHhkUzC/1HVyfigU6dMHep8UAnZKrm8Ed:6sIfroxlv9HvzCq6gPTKKQd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4a72c2b7243705affb85cec190185e1_JaffaCakes118

Files

a4a72c2b7243705affb85cec190185e1_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b9a2a179dfc8495b09d28f93cda43ad5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetPartA
UrlGetLocationW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC

advapi32

RegCloseKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ