ede175aa89f17a3de0f9aacd4509de02_JaffaCakes118 | Triage

Sharing

General

Target

ede175aa89f17a3de0f9aacd4509de02_JaffaCakes118
Size

67KB
MD5

ede175aa89f17a3de0f9aacd4509de02
SHA1

24e781bf136619d44d0cbfd055bfc09e26d2e3c0
SHA256

3784f2a1feadab7a3b4cdb7d01f5c7f5eb1b2963296aab0ce6eb5459d73cdb7d
SHA512

98d899dc52847d2a42fd9fda699e2a36092109f4a13c559e3bf3d3fb07e31bd79a6e864234059e0f3572429c6a084af33d55c43be064a0d665244721044d4ae4
SSDEEP

1536:QD1cuXoG9aCqCcEkkBEr4nxQ8tiVtZZ8/jzL:QRcuXozCqREZE6xQXf8/L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ede175aa89f17a3de0f9aacd4509de02_JaffaCakes118

Files

ede175aa89f17a3de0f9aacd4509de02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0545e254390631d57e71e5bef03abce5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FaultInIEFeature
GetClassFileOrMime
CoInternetParseUrl
ReleaseBindInfo
URLOpenStreamA

comctl32

ImageList_DragEnter
DrawInsert
ImageList_Remove

msvcrt

memcpy
memcmp
strstr
strlen
strcpy
memcpy
memcmp
strstr
strlen
strcpy

kernel32

CancelIo
EnumTimeFormatsW
ExitProcess
BackupRead
DuplicateHandle
CommConfigDialogW

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 512KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE