dbb0a33f9199407e70115374b556b73d_JaffaCakes118 | Triage

Sharing

General

Target

dbb0a33f9199407e70115374b556b73d_JaffaCakes118
Size

94KB
MD5

dbb0a33f9199407e70115374b556b73d
SHA1

4d294e99f486ffc9e93378979c1d0390dfdea3fe
SHA256

c7314abec2d1df736dbd382223b36d2958a227e10331a4f9dfcd280b65f6f665
SHA512

2367ece581fe03758aef4600c9ad55913dbf46722e85b81aefa3a0b6335a1c5e72974dcdccbf1b8253c8dc41f4940c600e353c4d71fb5bf505a9ea7f38967e27
SSDEEP

1536:3wnb8yOObfAnE6hfzgVRFqcSPkKXaqe2uSXKHTo0/63yfhyPH0Mwai:3woy1Un7VgpqcSnO2KTog63yfk/0MBi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbb0a33f9199407e70115374b556b73d_JaffaCakes118

Files

dbb0a33f9199407e70115374b556b73d_JaffaCakes118
.dll windows:5 windows x86 arch:x86

3d66d340ac3affea5fabb13015a98c15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrFromTimeIntervalW
StrFormatByteSizeA
StrFromTimeIntervalA
UrlUnescapeW
StrFormatKBSizeA
UrlCombineW
UrlHashW
StrDupW
UrlGetPartW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 75KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RI
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ