286b81fadd59e4c4930244f4a89beb01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

286b81fadd59e4c4930244f4a89beb01_JaffaCakes118
Size

50KB
MD5

286b81fadd59e4c4930244f4a89beb01
SHA1

29cdc137e9fbbd52a7e9a7652bc06994a90cb9b7
SHA256

ef66d5734f17fe62226d93a4533b7be9ee72682e0906450e66bdcbf92df4214e
SHA512

accc53bb0da4ec6ef3d820eab9c806ae64838c9c4d163e727c623688586450aa2ae0269762a0251d636e4bf1a2c5d4841825f646450a413d415f2e4418dcc24d
SSDEEP

768:XwSp6yXpve3vu4E75hRaYKSv61o0ZXUqy98/9+TfI8p7GClExylmQVvxOO:Xt6uW/u4C5we0ZXU614I8pbYy4QVZz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
286b81fadd59e4c4930244f4a89beb01_JaffaCakes118

Files

286b81fadd59e4c4930244f4a89beb01_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e91c94b4885dc97b81061213ef46c3d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetLocationW
UrlGetPartW
UrlUnescapeW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
GetDC
SendMessageA

advapi32

RegFlushKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.V
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ