f7d1c68f065e2c1014a73e68229d7975_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7d1c68f065e2c1014a73e68229d7975_JaffaCakes118
Size

34KB
MD5

f7d1c68f065e2c1014a73e68229d7975
SHA1

73511e254dd5bb3ddee5f66ed2c14ea577a9a603
SHA256

a7871e6217acde521cde65cb7a8c866dd7ee177ac3773250a6cad924c63f6fef
SHA512

92891c8c6b242c6c70c579f5f5febc432baf005161183d59de09d022194d31185b8c5abd2a8cdac117198c145c23c80815a06a3c6454fa2c72773975997ea1c3
SSDEEP

768:dfi6+Lysle1vIl6TAYvLfJkwkVBb2lx8PNQw7B:1F+zle1Ql6FkhHix8r7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7d1c68f065e2c1014a73e68229d7975_JaffaCakes118

Files

f7d1c68f065e2c1014a73e68229d7975_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 28KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE