c1f43b6e0084297a5a2afef40e33e3a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1f43b6e0084297a5a2afef40e33e3a8_JaffaCakes118
Size

90KB
MD5

c1f43b6e0084297a5a2afef40e33e3a8
SHA1

0b7c9aebff431f9dcd843c48fe1751688cc5cb5d
SHA256

8e667bbe40912833cd79356c57dbf9d6073b0e44e4664c11b3fca11ebb10dcec
SHA512

3501fea770c4b206654276e6b203e97721c51b28b082d9faf926d1dce1eebeae4087830b0677f88ddcf49fc8fffd26ebb9a2ea46e06d7ffc3d8de2dd182d79e3
SSDEEP

1536:kYQDkdoN31wkP+ZKbTMkgfPAWpY1DCg848p8MM1xamloobtd:34kG3l+MHSYWpeCd4JM+3lbh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1f43b6e0084297a5a2afef40e33e3a8_JaffaCakes118

Files

c1f43b6e0084297a5a2afef40e33e3a8_JaffaCakes118
.dll windows:5 windows x86 arch:x86

d9745387860066111cf8bddb3e2d6383

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetLocationW
UrlGetPartW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC

advapi32

RegCloseKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ