3ec5fd401c4e26518f0f012b4ce75e18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ec5fd401c4e26518f0f012b4ce75e18_JaffaCakes118
Size

43KB
MD5

3ec5fd401c4e26518f0f012b4ce75e18
SHA1

a6e6a9f22628477ccc260fe0061ec0fa55f2a6d9
SHA256

b5d1d16a6b9dcf7358783e040a0ede018eb7b00aaa3e2d8bb5aaa2d9065ac483
SHA512

d646aaabcd9b2d758d9112a097144741563d82fda536fba04253f418f288d99b80437200d5b0bceea6205f3826b0f0e517888ad3bcea3e7130eb57ed4e27040a
SSDEEP

768:xd8pslBtQg+clRXUdZO35adB38TIbd99b9gzapwI8JU8vGYann:ApsBjadZO3gYTO99xtNIZPYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec5fd401c4e26518f0f012b4ce75e18_JaffaCakes118

Files

3ec5fd401c4e26518f0f012b4ce75e18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 35KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE