3fafce5cb8421b9b40291197997a85a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fafce5cb8421b9b40291197997a85a7_JaffaCakes118
Size

140KB
MD5

3fafce5cb8421b9b40291197997a85a7
SHA1

51852af7e939d60940598c0e07a09d2f18376ecc
SHA256

bd0b3b5850ec0e861f7a1a46b992276c35e126887f73f013c827e21f70db67e5
SHA512

543b1a229dc448fa79b5944cb4c5944e6e2aed002927ec436d619af7d784192274c8ce8220a511714ad1e21de31fac18ae7e3f0b5024dad1a9f2220f932602ef
SSDEEP

3072:v6CP8bUWvBwszWYgn+9+2/mSoCE9iNtmFI+ZYHWINJMJD3:vZP8bBrz9l9xeZCNNtGI+Z5qU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fafce5cb8421b9b40291197997a85a7_JaffaCakes118

Files

3fafce5cb8421b9b40291197997a85a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbbc81631ebaa0a7d1f8fda3d6652c3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

URLDownloadToFileA

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 132KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE