344029bb4d3272fd6f012cb9b16b05bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

344029bb4d3272fd6f012cb9b16b05bb_JaffaCakes118
Size

99KB
MD5

344029bb4d3272fd6f012cb9b16b05bb
SHA1

fc7cadc1f71d924134127c986314c93104d2cded
SHA256

f1e1db09f76dd0cc948d6ccec8225e3b23509022834c5d38abd183c6c3741ad1
SHA512

a3986d63ee2a4e5965d3fc9e4f0e405ccff3ac03e748c172c915017116a67513c90733fd1ccc7dd62310bce7d65011ffaaab5491c88d0a3c1dacd0339571b4fa
SSDEEP

1536:pK3Kpg4h52ZIeUFd3MyVKLTI1t6xr3dYV+6oLgv7Sf/Ec9U6HT3rRrKKxa:pHT52mcyVSTITyrNYVPif1bT1rpxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
344029bb4d3272fd6f012cb9b16b05bb_JaffaCakes118

Files

344029bb4d3272fd6f012cb9b16b05bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1900879c98b4a96d399d6ce626330c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 88KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE