4124946eb6cb2b7542a1af9abf3a1ad8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4124946eb6cb2b7542a1af9abf3a1ad8_JaffaCakes118
Size

59KB
MD5

4124946eb6cb2b7542a1af9abf3a1ad8
SHA1

f3af947837751134cb8b59e3b7d274671d23f851
SHA256

5a23cb0f29c28159cf088ab8688602f70b292c1be69160c5f76a8285c422f2fb
SHA512

190f55e9787b0c9f2d361752486c705d8a5e6e313816725c6280ec7b14defae7739383def123f75e086ef66ccb13a2bc18f7b20778c1ed6473e67c8d51735045
SSDEEP

1536:vINDWlwh0e+i2SH+9xc7ey2QXhrI7/PbxOCSd3:vGD6wh0QZ+9xc7vXUPb0CSd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4124946eb6cb2b7542a1af9abf3a1ad8_JaffaCakes118

Files

4124946eb6cb2b7542a1af9abf3a1ad8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b050e47805e65d00631bd1193bf0c52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ole32

CoCreateInstance

urlmon

URLDownloadToFileA

Sections

CODE
Size: 49KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE