328f3f3f4a07c7b9ef668eb585ebef6a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

328f3f3f4a07c7b9ef668eb585ebef6a_JaffaCakes118
Size

167KB
MD5

328f3f3f4a07c7b9ef668eb585ebef6a
SHA1

27a024ce231a6f76cae762e82e3b960196538893
SHA256

b31aab3ca9a844ee8fe0fcd16f60a794fddd57858b76fbf11bcd8692d72c3cca
SHA512

fcf0d1c747f184f007719587eb73ad0e5ee484b137e25056cc5669c315c2140dbafac14229d1356197b854be602371d918b001b7bc3b255ea27efe9e6df45e31
SSDEEP

3072:k6yPxXlkrX8KljhZpigyQrjAOls/rzpLwAuwIa4kTOG46QXMmAIe3:kdPxXlkxNfyQnlsjFLwAulmTR4HMK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
328f3f3f4a07c7b9ef668eb585ebef6a_JaffaCakes118

Files

328f3f3f4a07c7b9ef668eb585ebef6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74f0e2cb895e44203dd36c07e70e7a06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

Sections

CODE
Size: 133KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE