3deb58ce4502c7e7bdb4d187a146204a_JaffaCakes118 | Triage

Sharing

General

Target

3deb58ce4502c7e7bdb4d187a146204a_JaffaCakes118
Size

132KB
MD5

3deb58ce4502c7e7bdb4d187a146204a
SHA1

832cbc24044f86023b1be81d63a0f5f364e1907e
SHA256

c4e895af33e51cb4fbd6af56c2a4b928ad3c5052a3b471e95e78fe3e651e2c8f
SHA512

24a725856070417f4484776dd51cd1156ad6cf4e6dd71d71817ba005a91a9672e352e50f960cd73ba89fa637897b3fa331fd702c199057f25c35d22dca8ae192
SSDEEP

3072:OrJfWfCwpdCMQNAtMZ5ABD8GVdH+p5WCpkPjL4xN+8gFvxYF:OlfWK8Q6eZO+ajPQxopY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3deb58ce4502c7e7bdb4d187a146204a_JaffaCakes118

Files

3deb58ce4502c7e7bdb4d187a146204a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE