3346ae364942a39d15c7abc5db1047bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3346ae364942a39d15c7abc5db1047bf_JaffaCakes118
Size

107KB
MD5

3346ae364942a39d15c7abc5db1047bf
SHA1

dcb8aea0b5ddcc8a12417eada4afbdf2e9348524
SHA256

208e14442eb14d21d67876fdb23545fafacbe740c673541e33fcfcfe83f7b530
SHA512

1382084a850e5769998863b87e86bc38e5aeb0ee0996b559be175b0ba39daeff8ce57e71a8c513260794f39b103597d31244d2337349740da0b83b2e885be484
SSDEEP

3072:3+V3erEsUWHyVrNIXxm98TSmJN97kopO:7rTSVrOXxm98dN97dpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3346ae364942a39d15c7abc5db1047bf_JaffaCakes118

Files

3346ae364942a39d15c7abc5db1047bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d513a3f34f0f475ce221e71f69e9bffc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

CoInstall
AsyncInstallDistributionUnit
URLOpenStreamA
IsLoggingEnabledA
GetClassFileOrMime
IsValidURL

gdi32

ResetDCW
StretchBlt
SetICMMode
SetRelAbs
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage
SHFormatDrive

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE