07c51bb0413a3629c1f9377cb11c3987_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07c51bb0413a3629c1f9377cb11c3987_JaffaCakes118
Size

155KB
MD5

07c51bb0413a3629c1f9377cb11c3987
SHA1

b817b80ac88053ca901adac89326285a4beef2a0
SHA256

6d927b1ead60979faff18285bdc5cb36b186c93490e351227c3e08ba645c8fe5
SHA512

8c06ec31daba1b5ca645a935353f113dcf69845b5d22be9dc1111bf04c687610bc3e909b4a83dfaacac2847a03a12228a6bc368ba234119eeba01e7596e056c8
SSDEEP

3072:25pEPYUXGpvdBywa1AlOezTkJmQA5HtUu/ZaOZJPy13:u2gUXGbRtmJmp5NT/Ze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07c51bb0413a3629c1f9377cb11c3987_JaffaCakes118

Files

07c51bb0413a3629c1f9377cb11c3987_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

YADO
Size: 148KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YADO
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE