c1f1c3d52f212839338620d98a6a6f4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1f1c3d52f212839338620d98a6a6f4b_JaffaCakes118
Size

90KB
MD5

c1f1c3d52f212839338620d98a6a6f4b
SHA1

a7511ed8f24cb4af888b2f90b48fe25a000efad9
SHA256

9f6e4ef289995212bb2bdf1e5977b19ef32efe86114916c11831ce41849f1e93
SHA512

9bb663eda0febec8e89b116f2d4bc8edb883dd1351d9f4c2cad6c07f78bdc4a88bdd97dc5237f7e0f2831e9c48f258ef41f129a8a2bd54ba095728b13416b101
SSDEEP

1536:2QgX8/ZV+PJsPPC1jO+m2p5LRdiEooVYIsgHSbaZSlmK7Mpt903kyXmSK:2QgMhV61CS5Lr0oV0efSQQUy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1f1c3d52f212839338620d98a6a6f4b_JaffaCakes118

Files

c1f1c3d52f212839338620d98a6a6f4b_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1f61fe8e8af19bce962645bf30fe7fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCreateFromPathA
UrlCombineW
UrlGetLocationW

user32

TranslateMessage
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
DispatchMessageW

advapi32

RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ