351f5c370d27f05a033f8cf8602de09a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

351f5c370d27f05a033f8cf8602de09a_JaffaCakes118
Size

51KB
MD5

351f5c370d27f05a033f8cf8602de09a
SHA1

ef99df1d57dc39aa734e2a164164286fe93da599
SHA256

88e4e9e05feaa0c13c75f7baa344f112e7a9092248e999a0bb86685610e4b485
SHA512

726d60b82c27b6bbdec15bf4001306d52ae34ffa2628b6e7561b8bf03b3ba10abd3b1a5baafb81707c31edde9c5d2978c237f57a7f51646ae23e1c8c93610935
SSDEEP

768:sRJ2Q/D7WbqsOXuWQJ6uunRoHVqUg5EWMRykgU1a2vuPbJttLkfQ84l60k4l:u1OFZJ6FRoZWjkRw2SJt1uQNlfB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
351f5c370d27f05a033f8cf8602de09a_JaffaCakes118

Files

351f5c370d27f05a033f8cf8602de09a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd321b1e97ddda73ac525120a887a6ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

urlmon

URLDownloadToFileA

advapi32

RegCloseKey

shell32

ShellExecuteA

user32

CharNextA

oleaut32

SysFreeString

Sections

.text
Size: 42KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE