3dedae2c7eb04f5c840320c114a87c95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dedae2c7eb04f5c840320c114a87c95_JaffaCakes118
Size

51KB
MD5

3dedae2c7eb04f5c840320c114a87c95
SHA1

6ac4a915062c5ebcc3edf5b826d618fa148f6fa5
SHA256

0a926e069628ff1a2e671f6079fe4e3dfd3d5a38d9f06abff36567311d4f8cf3
SHA512

cc8c42551da3492bd4d60bda0b594123cab1d0d79e77d948a67cf062b5af6d2931307525c75fe2d519b87db30890c6e2431b4a7cc013522305b392728f59d75d
SSDEEP

768:LDyNcwdU4zSODHD+rPJQhAK5lvExDAxD6hyhqKAN/mZQVM9lmoK:LeNtzzSsHyyAi+cD61XN/oY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dedae2c7eb04f5c840320c114a87c95_JaffaCakes118

Files

3dedae2c7eb04f5c840320c114a87c95_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e91c94b4885dc97b81061213ef46c3d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetLocationW
UrlGetPartW
UrlUnescapeW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
GetDC
SendMessageA

advapi32

RegFlushKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.V
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ