30765810bbde1b9c40293602923b4019_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30765810bbde1b9c40293602923b4019_JaffaCakes118
Size

262KB
MD5

30765810bbde1b9c40293602923b4019
SHA1

d10a2133f120580149218d7623230555718cafef
SHA256

271c64c813b7864e792befc5c6f74c3f8a2231ffb2c50d75887a0a0547f6e87c
SHA512

d8c6a87926c8b85faf001b971afe5844cd99c93b11099a1760281c78552b6afb4b77637c7bc739548fb47821cf7c77a9d0c7b66e34e3003d0b251da6a962028e
SSDEEP

6144:4b5/6q84P/AXLA+QAO9ncYmP35zE/Fzu8krNjC:4bMqf/w1lO+pP35z2K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30765810bbde1b9c40293602923b4019_JaffaCakes118

Files

30765810bbde1b9c40293602923b4019_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7be281a42707c903aadc4f8d07c4151f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 176KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE