120f9b6f26efc72bd7162ac101c41681_JaffaCakes118 | Triage

Sharing

General

Target

120f9b6f26efc72bd7162ac101c41681_JaffaCakes118
Size

132KB
MD5

120f9b6f26efc72bd7162ac101c41681
SHA1

803e97c99b094fcbc07e96ec7d8b4c8c95f1f53a
SHA256

bc2a8fd62cad870d783403151a40cb8fa1f02cd7ab9c352be05d05d6a1614d0d
SHA512

59849781b8dc1bc314740e7f6f8c016329f91679b0aedacb2d870dffea5b905c6b365bdde39046c04e21fcf8f8a2203931204cb2da262da2161154898cd36e86
SSDEEP

3072:mtnkNP+f5TLe+YUgy+3I+ZV6dNr8wkLMSGhHuri:jGRTi7yIgr/kGhyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
120f9b6f26efc72bd7162ac101c41681_JaffaCakes118

Files

120f9b6f26efc72bd7162ac101c41681_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE