d256c2f4a922cbf0092a0693ceec0d5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d256c2f4a922cbf0092a0693ceec0d5a_JaffaCakes118
Size

34KB
MD5

d256c2f4a922cbf0092a0693ceec0d5a
SHA1

7a2628125fb8d9e8daf0ad5abe25f4b235849864
SHA256

e3ff1480614ab5303a95db583e63449bcfc0ae89d7351325d5545676ba122503
SHA512

decf297e3be06026a4e1a1ca60ce26d6ea04eec9abbce878dce04d3e6ba87ed0a87a9ca443cc24048ce1969820fd87bb062e6f9db7b70f62aa1ca6e5c37c8685
SSDEEP

768:7hBSgMZyc3/wfVhBJPE4gB10z+ea6n/GS91AXjifIz:7hUHUBJPAQBe4ezifK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d256c2f4a922cbf0092a0693ceec0d5a_JaffaCakes118

Files

d256c2f4a922cbf0092a0693ceec0d5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffdf099e67c40e9c91ce17a9a596ae9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrStrIW
SHFormatDrive
SHAppBarMessage

urlmon

IsLoggingEnabledA
URLOpenStreamA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE