3f8b4b60655a2e551c8b6f6d088bcf82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f8b4b60655a2e551c8b6f6d088bcf82_JaffaCakes118
Size

167KB
MD5

3f8b4b60655a2e551c8b6f6d088bcf82
SHA1

b86fad80af6e5533f19a9ed1df15a34f8a93483b
SHA256

2d92ec454f09ea28a0f589db16bdf831c0edd33d02e8fd817425e0dbbf4d61fb
SHA512

92847869ac06fc2a6f1db0f0d2e8edbe0b51cd7fc022dc2df8056f4f4e427b20dab538340028596d70229143a19d516eddbee41dc4ca5a1c84e4d16287160a10
SSDEEP

3072:ZzosMc9kHeXRihnGTlyzTNpDC8qIFPcMBkH1fD9gNLmVEeE+zKYKpljqyS9BRqK1:CiF8SlyzZpdtFPIH1fOZmk+30jqyS9B/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f8b4b60655a2e551c8b6f6d088bcf82_JaffaCakes118

Files

3f8b4b60655a2e551c8b6f6d088bcf82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2bbddb8c010773f04c2d9dd29668462

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 134KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE