2ee4b33dbd4f3d387c08652e4497b11b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ee4b33dbd4f3d387c08652e4497b11b_JaffaCakes118
Size

65KB
MD5

2ee4b33dbd4f3d387c08652e4497b11b
SHA1

774ad9abc54bf57753b7b7d5d4c840d6fa8a8958
SHA256

b755064dc00385a1d8157fd26a53573edf3bf8c4909a0041e7e9d566779e1df3
SHA512

8e0807437b5136e2541552b897daa8cf2091551a7772781bc82b044be536d31d68a1a9960244ca673b8e3d4ce3d5096cec97572036e8757746f8880caa1f0424
SSDEEP

1536:gjnD70kCzAiatVISqPDaOTib0kwoRKW+B39kJ511APT0:knGAiOlqGOTiRKxB3aJn1QT0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ee4b33dbd4f3d387c08652e4497b11b_JaffaCakes118

Files

2ee4b33dbd4f3d387c08652e4497b11b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18aaf631ebec53541e148d0078670e89

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

mpr

WNetGetUserA

wsock32

WSACleanup

shell32

ShellExecuteA

wininet

InternetReadFile

urlmon

URLDownloadToFileA

Sections

.text
Size: 59KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE