09636e287dc5ae7c3d6826000be629ee_JaffaCakes118 | Triage

Sharing

General

Target

09636e287dc5ae7c3d6826000be629ee_JaffaCakes118
Size

38KB
MD5

09636e287dc5ae7c3d6826000be629ee
SHA1

d1d9d0e51572b1806f400832a16e7f5c22e1b0b6
SHA256

1eebe497324c2ddbfd6a471c4ba35753763a4425e89918911f541f267d9d1a05
SHA512

d74b2d7adb1c45cc8f74deb0d48dccefdeef6ca84cc92b3872f2a8f8469b58e6bcb01cb2b3fdeb7f4ca439ee01c5d434a8a205cdd0dc2daf36c968eb81793d4d
SSDEEP

768:isV0HfKP/zoLMFpwCBksOb+Bn4OceT5X5AMrjffKbM+2z7:inw/ML8Hy5bCceT5JJfFZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09636e287dc5ae7c3d6826000be629ee_JaffaCakes118

Files

09636e287dc5ae7c3d6826000be629ee_JaffaCakes118
.dll windows:5 windows x86 arch:x86

93bb8109d536c3fe98205592451c3b26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAddExtensionW
UrlCanonicalizeA

user32

MessageBoxW
TranslateMessage
GetDC
DispatchMessageW
SendMessageA
MessageBeep
DialogBoxIndirectParamA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ