ab05ecede3325fdd6b7eaf11efe9b84d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab05ecede3325fdd6b7eaf11efe9b84d_JaffaCakes118
Size

51KB
MD5

ab05ecede3325fdd6b7eaf11efe9b84d
SHA1

a4947d9020e7b64545c6d43df3b8300217ea8a88
SHA256

8919b0a4945fa9acdf685739886c2a48a937a00d654cf8541bafeeaa4b6963c7
SHA512

5eb395b51f9fc5fa0ae249686da6afb5ca6948e4cdb077ae22320bf8c1e23cefc553153679fec2ba772ef99a55b2bfbf79d137fcbda7e0ca6d29cf001bd29e82
SSDEEP

768:29skV+UQ75U2Y0V6TJW6TbNAJxAM9F9LJmgViTnBd8duxLrdPRKpFK0iBJSn3jxt:2AVW2Y0m4e5Mp1QSduxPdPuF50Snv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab05ecede3325fdd6b7eaf11efe9b84d_JaffaCakes118

Files

ab05ecede3325fdd6b7eaf11efe9b84d_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b9a2a179dfc8495b09d28f93cda43ad5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetPartA
UrlGetLocationW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC

advapi32

RegCloseKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ