fa504cb613df5a3aa2c07a7fa05eede6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa504cb613df5a3aa2c07a7fa05eede6_JaffaCakes118
Size

34KB
MD5

fa504cb613df5a3aa2c07a7fa05eede6
SHA1

6f1def1760f9a573ec7b1b57956dbdc2fd2f1784
SHA256

d723b859bf310243546bdfa29e6b15f84fc6eb4f68048df0efdb196b95c67785
SHA512

07b3af14a7e57e8b36ac770f316bad35f5e0de1590a1cb5b9c38b6d2e9bc7b4e735c5235a3e51a2047a6286d27009d26a17dc7e14d57b5ebe3a74a634e722e01
SSDEEP

768:X3FHr/NnRsxJ9eC0YgMQXscCEc0CNi55qwktYuu6jk0Ffo:XV5RYJ9eC0Y9QccMcBktxu6jkAfo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa504cb613df5a3aa2c07a7fa05eede6_JaffaCakes118

Files

fa504cb613df5a3aa2c07a7fa05eede6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b6906acf5d8349b80d31ba15df97428

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDIBColorTable
SetICMMode
SetRelAbs
ResetDCW
StretchBlt
UpdateColors
SaveDC
TextOutW

shell32

StrStrIA
SHAppBarMessage
SHFormatDrive

urlmon

GetClassFileOrMime
IsLoggingEnabledA
URLOpenStreamA
CoInstall
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE