f5624d97a72e252d1fa252edc1fab213_JaffaCakes118 | Triage

Sharing

General

Target

f5624d97a72e252d1fa252edc1fab213_JaffaCakes118
Size

107KB
MD5

f5624d97a72e252d1fa252edc1fab213
SHA1

5934fda090afbb9740ea9cb49c706d5f5209f9dd
SHA256

e4383935bc8dfcc8314c5e9cba2f3c49ed7cf1d38a50a61644a3c320d9cf0f68
SHA512

41206ea19ec0fa040c8daec8fea7b1dce46d7dcb80c928643e679845365ec33f52e92e6ad3b4dcd17a771dde8773530c89fd51c4363e351209b51c930c2bda93
SSDEEP

3072:IzN/9nWoR5XkY2jeqybtmXjaUfwTw2nLXC7dQD:C/ooR5UpjyQfwk2nbCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5624d97a72e252d1fa252edc1fab213_JaffaCakes118

Files

f5624d97a72e252d1fa252edc1fab213_JaffaCakes118
.exe windows:4 windows x86 arch:x86

452e807d179221a69a9f39536182a2fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRChrIA
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE