16491641cbbac0d2b8419b26bff605a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16491641cbbac0d2b8419b26bff605a5_JaffaCakes118
Size

107KB
MD5

16491641cbbac0d2b8419b26bff605a5
SHA1

599b80b2bc7cd741a5df30c3192ae331181d887d
SHA256

e3f30b800fff96f520d0a2fe539ab59d3142711527ceca729008ff26120e44c0
SHA512

694a1d9bf45a55c93f184a183f35a3328748b507dd9e30ad3ea841b78485ff69653d148732c4adec235506d78465a05a19c31b0e9046da7aff6b79a1ef99ea0b
SSDEEP

1536:GAnsSCd2P6BSoLMxF/qqwhFGADGMG6+IH2YA3w9RjCLwrXQBvinS8eMkFsGJyQHV:GAnmd20LMW7fyM9/mNmQBO1oeBoM0I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16491641cbbac0d2b8419b26bff605a5_JaffaCakes118

Files

16491641cbbac0d2b8419b26bff605a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffdf099e67c40e9c91ce17a9a596ae9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrStrIW
SHFormatDrive
SHAppBarMessage

urlmon

IsLoggingEnabledA
URLOpenStreamA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE