16b831a2bf54b9c1a0b2dc68a61d4f49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16b831a2bf54b9c1a0b2dc68a61d4f49_JaffaCakes118
Size

51KB
MD5

16b831a2bf54b9c1a0b2dc68a61d4f49
SHA1

e4906c07c028ec4bde8f6a85c59acef4d80da818
SHA256

e0e629a9c1c12ed80aeb20bb6c6cea55c0fdebf9aa430a17ade86f664dc9f3de
SHA512

d9e8c204729cbda570d0af00406a4f3917ac95c20d3dba99ad316c9230b80827525f5602bb76374df38030d47558138cdced19b73b3efbbef7de2ac7699bce2b
SSDEEP

1536:nu2sAgG6p6h3KZGGSX4+GUwpFZbeS+Sm:u2sA96pZGGo4+GUwpzbeSO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b831a2bf54b9c1a0b2dc68a61d4f49_JaffaCakes118

Files

16b831a2bf54b9c1a0b2dc68a61d4f49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd321b1e97ddda73ac525120a887a6ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

urlmon

URLDownloadToFileA

advapi32

RegCloseKey

shell32

ShellExecuteA

user32

CharNextA

oleaut32

SysFreeString

Sections

.text
Size: 42KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE