ed372ec003a109b7fbde481d85eb1a52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed372ec003a109b7fbde481d85eb1a52_JaffaCakes118
Size

34KB
MD5

ed372ec003a109b7fbde481d85eb1a52
SHA1

6e3920e9368bb06eec78082ec729eb6c7d3a6279
SHA256

a063ee3f3bc5d175b24e1587e2c57ec98688d8fb4b75d541dd93ed27310774b2
SHA512

a5d9399c98d3cb524a014138f76ea5e06dc08081411c42442f722f8cd8c2527549feae8207b7b337e2276a7921d3abc23335651c3bf957e67b3b9f1ac04e1aa1
SSDEEP

768:Pl1OAZX5i0nPJtGK8zLVt4T5x/zHsEQ8JjMV:iAq0rGV47sEQ8JjM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed372ec003a109b7fbde481d85eb1a52_JaffaCakes118

Files

ed372ec003a109b7fbde481d85eb1a52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffdf099e67c40e9c91ce17a9a596ae9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrStrIW
SHFormatDrive
SHAppBarMessage

urlmon

IsLoggingEnabledA
URLOpenStreamA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE