c132cd2b5346a386c41338ebc9e4ee1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c132cd2b5346a386c41338ebc9e4ee1a_JaffaCakes118
Size

95KB
MD5

c132cd2b5346a386c41338ebc9e4ee1a
SHA1

b83dbb2e79e094e0978de3328ad640a4f3972da3
SHA256

2624e29b9fc200c1b920f42d6185cf9d0b2495e0a6bb559073211e43c7db5d74
SHA512

4743fc180e0b9dffee5bcb4fab56e9f09bab33a235a06900907e668812c417752a68213b13339ea13375e573f3ecc611dddfb8131a4ab59882c8d5fc87b4d29a
SSDEEP

1536:K6Tg2Ins6tj/rg0CwMSZqygS+KKPaSsT7UfLXI03QdRJHDKa/APdQfqEfR:1gfxtj/0wMxygM9D3QS93GdEV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c132cd2b5346a386c41338ebc9e4ee1a_JaffaCakes118

Files

c132cd2b5346a386c41338ebc9e4ee1a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e7e27522ccb643d5ac52673f8ef6103b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlGetLocationW
StrFromTimeIntervalW
StrFromTimeIntervalA
UrlUnescapeW
UrlCombineW
UrlHashW
UrlGetPartW
StrDupW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
MessageBoxW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RI
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ