194523fbf5bada36c0fb9a4786031086_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

194523fbf5bada36c0fb9a4786031086_JaffaCakes118
Size

3.6MB
MD5

194523fbf5bada36c0fb9a4786031086
SHA1

0e4bcd3258bcf332f0febc1b9aa2198cd1d2b164
SHA256

750e260a780f6d0b4551877934082195f7822fcc794c0bd1d784bba9adff14e2
SHA512

e1c056e149f5dca7abb35cc9e56da4db6fbe8c4dab51813e8802a013ac309a936d368c52ee390513865e8d438e08793922ec27e49e02eb6521d861cdabb3b1a6
SSDEEP

49152:LLhuf4GQqdlUnV87qM8TQIe/P23TWdNz2vDu43AfUQc1CWe/v/Fa7QAIxqRYoq:yFdlyu38ne/P4Y5gn3w6CT/Fa7QAIxP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
194523fbf5bada36c0fb9a4786031086_JaffaCakes118

Files

194523fbf5bada36c0fb9a4786031086_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7c160e6486e1bd9ca4789af81fe20cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

winmm

timeGetTime

Sections

CODE
Size: 3.6MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE