83259ea84925f23ce43f526c0fc4d24b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83259ea84925f23ce43f526c0fc4d24b_JaffaCakes118
Size

9.0MB
MD5

83259ea84925f23ce43f526c0fc4d24b
SHA1

cea14972295dcd5582acf54a8ffd40d422851b5d
SHA256

1d8ef9f48e4503eb1d25741d62c79a23c308074833ccf0aa7429fdf0f6519420
SHA512

42df35b527bae45c69e01a634cda5e657890df4b4f2ec5914887a91ad6ccd0d20ddd7e65de44f58b6c9d6e3494c94d6ee43cfc981fd708d82f6d13f483b2e7eb
SSDEEP

98304:sBJNsBeLQztuYrwCiHyvD04zARp4hm5dQrm1:s3OwCVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83259ea84925f23ce43f526c0fc4d24b_JaffaCakes118

Files

83259ea84925f23ce43f526c0fc4d24b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c353f00fc426acb7e08e5400d9e0d07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ResetDCW
StretchBlt
SetICMMode
SetRelAbs
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

shell32

StrRChrIW
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 229KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE