a731e1e5bfceab81f284b7304c91597e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a731e1e5bfceab81f284b7304c91597e_JaffaCakes118
Size

90KB
MD5

a731e1e5bfceab81f284b7304c91597e
SHA1

730a2bad591324252ae20fad48bd4f05c6e084e8
SHA256

78f6973d60bfc9e93cbfb26b37a9680a13a3e71bef97e91ee7cd58635067c4f9
SHA512

327114d46bae059e9b5259a734f3f26a8045f7960172816a3774f61d5b6442dda79d458ce80c8f375f59bf43e2d7308a663a8d1b05b74ddb412fd61726b01b15
SSDEEP

1536:wf4BWRN4Xb/K7TRNsfUECYEorR02lkzwm6Km06gsKzfT4mGUI7sB1:wwAT4OTRNsf7ryj16MFLdGUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a731e1e5bfceab81f284b7304c91597e_JaffaCakes118

Files

a731e1e5bfceab81f284b7304c91597e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b9a2a179dfc8495b09d28f93cda43ad5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetPartA
UrlGetLocationW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC

advapi32

RegCloseKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ