35444340bb67f07f106e9c6005f79756_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35444340bb67f07f106e9c6005f79756_JaffaCakes118
Size

27KB
MD5

35444340bb67f07f106e9c6005f79756
SHA1

e09debacc1513438c9874f88eeefd5dfaa78c4ca
SHA256

9166951762c61c1087109344cf070e4ac023434e33c2a224c63b26a3487b5c54
SHA512

20506b4ba0de835d369a37a28e648e84a555a0271b538a755735c0675876054c3b7d401e8ecd982cc0a68a005538d3109e7072952f03af13766b8b456a9a0350
SSDEEP

384:d40bGK1wr1cMi4cM59ja5DOo7JKHqT3rWMRkIYiDWvMS9/J1/35DSuU0AXE1M:dIIw5PcDF1qq+ALDwFSXE1M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35444340bb67f07f106e9c6005f79756_JaffaCakes118

Files

35444340bb67f07f106e9c6005f79756_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7d7c3ff539676c9bd771c495fec10b96

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

urlmon

URLDownloadToFileA

Sections

CODE
Size: 19KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE