3f6672829ee17c8ce30c3a4cd520db03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f6672829ee17c8ce30c3a4cd520db03_JaffaCakes118
Size

87KB
MD5

3f6672829ee17c8ce30c3a4cd520db03
SHA1

6049a8e393e13e6c401df45bbf9fc19cce6ac4da
SHA256

09b628a3dacdf31945a23d66e8239876c721edacd93a3ee79b1fb6b238702c3f
SHA512

f142c6dc645b6d956ae346c7b5fb138ed79efb789ff7df291e34b99c2251cd21b84f89dee9ff57db5d876c5406eb6820c2401c94b721afcf4e6e29489bc7df2d
SSDEEP

1536:5w42arwzZWd+YYkSS4BNEFl/Cvt2Q2ziCMJekYy/UDuh3x+mpLguQgP7PjaT:9F+YYkS5BuVC8QvCMvX/UDujM3Wrc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6672829ee17c8ce30c3a4cd520db03_JaffaCakes118

Files

3f6672829ee17c8ce30c3a4cd520db03_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1211fc073fbb4e4710ead3ca69ef5f9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrFormatKBSizeW
PathAddExtensionW
PathAddBackslashW
PathBuildRootW

user32

MessageBoxW
DispatchMessageW
TranslateMessage
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RCODE
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE