20f5637c1f4117569183e884aab4d0c7_JaffaCakes118 | Triage

Sharing

General

Target

20f5637c1f4117569183e884aab4d0c7_JaffaCakes118
Size

9.0MB
MD5

20f5637c1f4117569183e884aab4d0c7
SHA1

22bf3d16bfb7a2b96c1c285a7e0e5667cd98fb0f
SHA256

9e7d753b3db24d08766eae29d33ac3e2f3a78d38000e5f1c32515ee7c5a32296
SHA512

6e07432ff4cb8901ce6f722095ce35523cc94b0dd8199f6e93135ff1507084caa8bb3a6cf4e83a7471d5e14fb6362367b0de40248c11a7e2099965470c3c1071
SSDEEP

98304:sCeisBeLQztuYrwCiHyvD04zARp4hm5dQrm1:sCelwCVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20f5637c1f4117569183e884aab4d0c7_JaffaCakes118

Files

20f5637c1f4117569183e884aab4d0c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c353f00fc426acb7e08e5400d9e0d07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ResetDCW
StretchBlt
SetICMMode
SetRelAbs
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

shell32

StrRChrIW
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 229KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE