3b6aa7d70671658065e6cb214864705c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b6aa7d70671658065e6cb214864705c_JaffaCakes118
Size

34KB
MD5

3b6aa7d70671658065e6cb214864705c
SHA1

071553d0353526cf1f8b88b92f7f925aa5886424
SHA256

307a3b2118e9969d517278b3549d69a14f3a7ec3ad079ec7f2833a214dc5dd05
SHA512

27f3892c99161377ba96f1e28fa4f77f3cd5e29e8866d4f0347e45e91c55c85750f1b73f73b42d72f6e2e7d24777cb0b713621c63e5d5062e7cf8d7efb96a9aa
SSDEEP

384:wQgYsd9w6EubTsowU2O9NeUiem/loMqTwAzEwrXkERmxDKfZK3Y0zGbWw1b4cN53:hgYsrNjstSU2wzwrXkEM134Wm4swkxP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6aa7d70671658065e6cb214864705c_JaffaCakes118

Files

3b6aa7d70671658065e6cb214864705c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0dd28c30dea0b829fe2addad09403d7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrCmpNA
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE