0398071e80392059f3d81587a13387df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0398071e80392059f3d81587a13387df_JaffaCakes118
Size

51KB
MD5

0398071e80392059f3d81587a13387df
SHA1

de193531c42fbf220aa5e670a6431ef850cff55e
SHA256

d03da143e81a9e2435ba6852a930f583484216639a07a459805ee4ebd449b145
SHA512

c5d4a32b16fd04a4593dd58c1e6ef75530c1e69b99d711cd64981bc675b1b26a08f424b67d3b656b354ed3a2d3b3ade03aeaee15da20dd8d173a7e0f50e714a4
SSDEEP

768:UcnBJ5UN2sjEQyD3d229KJtvraPKrsVcXSjkJiuseeb938J9ZeClXr:XBJKjEQ+N229KJtjaP+syXvJo8J9cIXr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0398071e80392059f3d81587a13387df_JaffaCakes118

Files

0398071e80392059f3d81587a13387df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd321b1e97ddda73ac525120a887a6ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

urlmon

URLDownloadToFileA

advapi32

RegCloseKey

shell32

ShellExecuteA

user32

CharNextA

oleaut32

SysFreeString

Sections

.text
Size: 43KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE