f4d9c60c2958293008980c7ec22b3def_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4d9c60c2958293008980c7ec22b3def_JaffaCakes118
Size

107KB
MD5

f4d9c60c2958293008980c7ec22b3def
SHA1

ff045a4e7f0f8ff7af0d59f4052808a82538ce2a
SHA256

3eb3dbdca9aac6b9f598dd24df149f2a32a0f1fc998e1ef80240de76f930abd5
SHA512

c5ac5282b6e42d83de5e3dcaff68a6c988d2cdb18c158284b779790889dfc2773c1343718ecb69ec2160131421c7976aaa5d12197b2aeb0e848de73ff1778cf3
SSDEEP

1536:UxgKOX9/JS3s5omnl/kP/+ROYmUPG39tnOB2/UIcG+LAXrfl7kp0K5kbH8Oax9vD:ak/JC+omgWgUe39t82kGGE7X2Uq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4d9c60c2958293008980c7ec22b3def_JaffaCakes118

Files

f4d9c60c2958293008980c7ec22b3def_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c353f00fc426acb7e08e5400d9e0d07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ResetDCW
StretchBlt
SetICMMode
SetRelAbs
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

shell32

StrRChrIW
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE