29b7fad10c4a9c60d390b660ea828468_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29b7fad10c4a9c60d390b660ea828468_JaffaCakes118
Size

416KB
MD5

29b7fad10c4a9c60d390b660ea828468
SHA1

d1e33bbeb22bc405cb5a37f88bc3fdcb1e1aaa45
SHA256

b7c18f089486ead5754ba67f38c0211d8d9d0d28bdf6c36d637f2234c8a64bb8
SHA512

695af167d655d8a1563d91970fe4bfdb32b6c1a755acc9c459e8ccf1f77983ba0238ca53a82aa3dc300b37e33a8800784f557b5a1749944b65c9dd446cad4496
SSDEEP

12288:XhVyxWkxoD9vQUyWTPqpov9fX3EknI7xE:HyckOD9pTPvv9fnEknI7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29b7fad10c4a9c60d390b660ea828468_JaffaCakes118

Files

29b7fad10c4a9c60d390b660ea828468_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9a3d47edeeb62d8e177bae6a42924e37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlEscapeA

kernel32

SetLastError
SetErrorMode

msvcrt

malloc
free

winmm

auxGetVolume

Exports

Exports

usoeityu

Sections

.code
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 360KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ