657bc93d5e14f70f4b48ffdc8e1e5159_JaffaCakes118 | Triage

Sharing

General

Target

657bc93d5e14f70f4b48ffdc8e1e5159_JaffaCakes118
Size

107KB
MD5

657bc93d5e14f70f4b48ffdc8e1e5159
SHA1

340873c4e98af68c725b6d8f98d909a7cd8e6a1e
SHA256

7648a002e9381cc2031620bc2207e18e90965e84c19ed7f4f685324e12b7834d
SHA512

5f1e10134618bcc5a0e994f641338c9762bb1604cc2ef6e95a9111b9a7eebe517f9c8499000900e4f5fb2ae79f8a9151704701cc3a554c2812cceea6fe743a66
SSDEEP

3072:hQcOp5N/lKfFmX9tn4+4NJxda/2vDyAbWU1iUk0:hM7N/688/KAbF33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
657bc93d5e14f70f4b48ffdc8e1e5159_JaffaCakes118

Files

657bc93d5e14f70f4b48ffdc8e1e5159_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b6906acf5d8349b80d31ba15df97428

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDIBColorTable
SetICMMode
SetRelAbs
ResetDCW
StretchBlt
UpdateColors
SaveDC
TextOutW

shell32

StrStrIA
SHAppBarMessage
SHFormatDrive

urlmon

GetClassFileOrMime
IsLoggingEnabledA
URLOpenStreamA
CoInstall
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE