2fe7ade2087f2ad11a323ab147095def_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fe7ade2087f2ad11a323ab147095def_JaffaCakes118
Size

3.6MB
MD5

2fe7ade2087f2ad11a323ab147095def
SHA1

7f4d56cb5e30dfe96e10b8d79b4e18cc62acd888
SHA256

cd0a7eac2b4c7fdd9e6a1205fd5ae1e3237a161ef3d6bf160c860422a9c54b86
SHA512

87e7091f999601805564f49f50c1e4290b2f4b7100280b70b4de9e6fda2f27bb0de2b6e60d35f764b4bdc52fd273e48a2f79db6840bd23582aa0548c06b1aa03
SSDEEP

98304:EeA1Dx/GK2ZNlYOHp+9Y33WnWwXi2K0KP:vA1Dx/GrZNlYX9YmuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fe7ade2087f2ad11a323ab147095def_JaffaCakes118

Files

2fe7ade2087f2ad11a323ab147095def_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7c160e6486e1bd9ca4789af81fe20cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

winmm

timeGetTime

Sections

CODE
Size: 3.6MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE