2c7b8d33b6814ec683085478713d71f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c7b8d33b6814ec683085478713d71f8_JaffaCakes118
Size

43KB
MD5

2c7b8d33b6814ec683085478713d71f8
SHA1

5589d4b32f11a607f61edb895cd766079a7846ed
SHA256

f064def0a1f9248d08ffc97ac7c1c7cd51c78e1ef0be91b31a866cc5616e2296
SHA512

3401daea1317d85f4d54dfce3af29eb7729afe7c4f93b7978a2bbe251904c03c3a35d64c19243895fea80d8dfe430dc4fe96eaccf03e7763451524ce4ed52556
SSDEEP

768:Zd8pslBtQg+clRXUdZO35adB38TIbd99b9gzapwI8JHpqDYan+xyZN:YpsBjadZO3gYTO99xtNIhY+xyr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c7b8d33b6814ec683085478713d71f8_JaffaCakes118

Files

2c7b8d33b6814ec683085478713d71f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 35KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE