abda5e763580c62c0285aae1459d1344_JaffaCakes118 | Triage

Sharing

General

Target

abda5e763580c62c0285aae1459d1344_JaffaCakes118
Size

9.0MB
MD5

abda5e763580c62c0285aae1459d1344
SHA1

4e29ad1b69bfb16bf3b55677c0a319f36ebb2788
SHA256

9296d9acc0f9c8e2b774f7c3a9dcf708ae19be0cb04e5efbee93838ec45cd93b
SHA512

ea2d0f6a5304bc2fbf42653820a52784b858c05b7655c55b8f53170ab6635b1c8f8ec4f0c8a14c62c6dcb9650c01168b02361a6dd4fb7a8f1118a696435d08f0
SSDEEP

98304:eosBeLQztuYrwCiHyvD04zARp4hm5dQrm1:eHwCVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abda5e763580c62c0285aae1459d1344_JaffaCakes118

Files

abda5e763580c62c0285aae1459d1344_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0dd28c30dea0b829fe2addad09403d7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrCmpNA
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 233KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE