bbeb8500bf7e5e6058891c53c27dc222_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbeb8500bf7e5e6058891c53c27dc222_JaffaCakes118
Size

50KB
MD5

bbeb8500bf7e5e6058891c53c27dc222
SHA1

31607874af48510d80e293968eb90451d5d09d2e
SHA256

1d481e0137a1a34402502909eb106b97945b5e6c47af2cd3f1eb6d7b4977af45
SHA512

b5c0a582139c4241a2d8d25412cf04dc7acc6bef99d4b410bfd9a3a9924e348f77168e1c1559f644a0833b1b86f3e219822d19ed3a37d6d4ecddb8c13cc7a744
SSDEEP

1536:GNeVM+EAM6NZhO1vm3nynpOOZ+Rz3h9EnFwYX:geVMbX6TyvY9JxG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbeb8500bf7e5e6058891c53c27dc222_JaffaCakes118

Files

bbeb8500bf7e5e6058891c53c27dc222_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c20711ed681eeb1a7212f563b3be6ced

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAppendW
PathBuildRootW

user32

MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ECODE
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE