ba22292e3ddaa3e3df49eac07237edd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba22292e3ddaa3e3df49eac07237edd4_JaffaCakes118
Size

16KB
MD5

ba22292e3ddaa3e3df49eac07237edd4
SHA1

6da5554be58a79213edd1dbb74c1f69cb6036db6
SHA256

6604981fbcead8fb8a6607b47d575b8ae85eca8f6bcd08b4c41cef8a8d08cce9
SHA512

71e3410829488d0fa2704c4187c2bf8f6c87b782b97e191b520517ff13766aea47555bf108cbc12ed2fd211de3846308dd791542fb948d157f706075a4545af6
SSDEEP

384:6WIBYJ7/2jsFDeXlpxY6sV/eAjohN/9A+x+KGVn:lIBlRlpxYFVmSEA+xQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba22292e3ddaa3e3df49eac07237edd4_JaffaCakes118

Files

ba22292e3ddaa3e3df49eac07237edd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE