2c6d96c3bf6e20cbf2ca2fe27ceb4c11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6d96c3bf6e20cbf2ca2fe27ceb4c11_JaffaCakes118
Size

34KB
MD5

2c6d96c3bf6e20cbf2ca2fe27ceb4c11
SHA1

82ea8fdbcc512a2ac8f1525b54988059e4295a95
SHA256

98a9b87ab67394e016f7b18bc510582b4e556220754bcd90c22b0c9d730ab4f2
SHA512

d12fb125b95565f0f194c3200837f7ec51348c5f974e2a794adffd1786be106a8338707ebdbcee6112397074c401159ef4a20ad191065addc5185d0bf42dfcfd
SSDEEP

768:pQpskvtjj7K52RyM8KvWPAkudX3MnvBqRXO9MfMtN6/qHon3:pStjO2RyM8KvWPAkZvMR+vQo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6d96c3bf6e20cbf2ca2fe27ceb4c11_JaffaCakes118

Files

2c6d96c3bf6e20cbf2ca2fe27ceb4c11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b6906acf5d8349b80d31ba15df97428

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDIBColorTable
SetICMMode
SetRelAbs
ResetDCW
StretchBlt
UpdateColors
SaveDC
TextOutW

shell32

StrStrIA
SHAppBarMessage
SHFormatDrive

urlmon

GetClassFileOrMime
IsLoggingEnabledA
URLOpenStreamA
CoInstall
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE