60ee7698594e5392fb5886bcbdc375a2_JaffaCakes118 | Triage

Sharing

General

Target

60ee7698594e5392fb5886bcbdc375a2_JaffaCakes118
Size

107KB
MD5

60ee7698594e5392fb5886bcbdc375a2
SHA1

b390154bdf2d2d37577adc2695e135fdd34f51f0
SHA256

b3579df645f9e8a8cc1d7c2720495de9119d32ee89b6ea3855f8e9ddf4954cce
SHA512

f13227863961b2c99b6560f8e49521567a673b0bcc90fff8c2a6b36ff7df6b1607e9a1c3b290142ff7028468f051145c41acfb487f0062545afb0faa9a762742
SSDEEP

3072:YyBSoch3zOa3sAfXZS9/K27H6iu/RtOTjZ:+9h3zrXY9D7H6iuJtOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60ee7698594e5392fb5886bcbdc375a2_JaffaCakes118

Files

60ee7698594e5392fb5886bcbdc375a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06365f4a48f89967bd303c57baa977a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrCmpNW
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE