2e5dd83dde86598c75da1bb7302d457b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e5dd83dde86598c75da1bb7302d457b_JaffaCakes118
Size

153KB
MD5

2e5dd83dde86598c75da1bb7302d457b
SHA1

4e97620338683079780d5551e9011feff31434be
SHA256

41a8645cabcc0497a4ad5dc31ce037506b8a579d1c8822f4e11653d6a336962f
SHA512

cbec313338dd8682b16d5f4add770670c57a12f5ab7e0d517bc83d531114c68bc05fe83f6948a4b86fec1c2e5091a62d598efd5f1baa36780bb3e4ff2ae117b5
SSDEEP

3072:H4jqDOAnJZE+6vGMWq4E1wTakIfWeW2Fsn85bC7xhfX3:HUDb+6Oq4E+TsDj3EPf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e5dd83dde86598c75da1bb7302d457b_JaffaCakes118

Files

2e5dd83dde86598c75da1bb7302d457b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2bbddb8c010773f04c2d9dd29668462

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 140KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE