3d3d080fea6e9a3621cfe8420db33ffa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d3d080fea6e9a3621cfe8420db33ffa_JaffaCakes118
Size

99KB
MD5

3d3d080fea6e9a3621cfe8420db33ffa
SHA1

7221aee3d3c24ae625d47835c07a4ed06a1d58ce
SHA256

6700cc239a2acb522af298f6777bc227dd6c6d518e652c768877b42598aebbe3
SHA512

a69401216a265c973eee7c309f17779a11aea4efc01172da5ecd9b809b76d22e689c98125462fd072cccd7c9c85efe92b140ad9fc838585ae7197fbbe1839322
SSDEEP

3072:bHT52mcyVSTITyrNYVPif1bCpoP2rp7x:bz5Ay8C2bCpoAp7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d3d080fea6e9a3621cfe8420db33ffa_JaffaCakes118

Files

3d3d080fea6e9a3621cfe8420db33ffa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1900879c98b4a96d399d6ce626330c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 88KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE