a9073ae8e8795357ae0737cf39de4402_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9073ae8e8795357ae0737cf39de4402_JaffaCakes118
Size

47KB
MD5

a9073ae8e8795357ae0737cf39de4402
SHA1

d7deef7a91825ec334549d576596acfadd240401
SHA256

7ce29e376369709eeaf865b60a6d01eee53ed127baca7200f33a3d5f112edd41
SHA512

bb51f7a5213fda1d16287dde43d0eb67118dd530f78f01b5ed66497a206d0e0ac6010d2fd8948762e210ef9b375ffa65c4e5f87652cc053504c3e32c3242f8ce
SSDEEP

768:eKHE5OwQuoK4ZBIC5PeVD+I2GxzDigOUsv4jg05tYec:BEk7eCch8GxzGrv4Hc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9073ae8e8795357ae0737cf39de4402_JaffaCakes118

Files

a9073ae8e8795357ae0737cf39de4402_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f372811452738e6fe7310db511d73972

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrCatChainW
UrlGetPartW
UrlCombineW
UrlHashW
UrlEscapeA
UrlGetLocationW
UrlUnescapeW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RR
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ