da167fc72758563586504f3da2414b7c_JaffaCakes118 | Triage

Sharing

General

Target

da167fc72758563586504f3da2414b7c_JaffaCakes118
Size

107KB
MD5

da167fc72758563586504f3da2414b7c
SHA1

b1294f700fa63ca9adcaa8299d3b78baada78645
SHA256

669776393aa96fdf0c8b665c52e2eeb87b46872b575a4067a741c056dcc379d3
SHA512

fcfdac0b38826c70950d204d3f0b9b703de402c5aac58b704f37058b1dbba4f5604a9ca7c6531091a9be1c9815d90d12ee2100776136353b74f0f49eebeaecc0
SSDEEP

3072:16P8KJ5h7l44pnQvF69CjodJrkORWSUppqm:16//h7lhkk9vg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da167fc72758563586504f3da2414b7c_JaffaCakes118

Files

da167fc72758563586504f3da2414b7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffdf099e67c40e9c91ce17a9a596ae9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrStrIW
SHFormatDrive
SHAppBarMessage

urlmon

IsLoggingEnabledA
URLOpenStreamA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE