4237b169753e52c019ea13889c1f57a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4237b169753e52c019ea13889c1f57a7_JaffaCakes118
Size

335KB
MD5

4237b169753e52c019ea13889c1f57a7
SHA1

80fe6b94be8a54f0dfa690dde1281aee449d388d
SHA256

afe2eb47529f722af54d99324dd0cd9605d420bc299d4e02a4d27af758d40406
SHA512

6de83ac8ade79512070e2983da30c3e27b82d6c3025c8171afa1b3f728bcd2eb6ea1a64b9a4ff7620c908e75537ae074b1553ca166d8957320cdf5bfe3f6a449
SSDEEP

6144:2GzF9hnUb8BxQ80fQYnyJBCgbeWZ/9xAuJ0J61AgdoKpmDJLHZOLuQKdh3:2sxUovjYcBfeWpnA5MAgyGQJLHZ4FKdR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4237b169753e52c019ea13889c1f57a7_JaffaCakes118

Files

4237b169753e52c019ea13889c1f57a7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

974c1b68edf71f9dfb3f38835293c1e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

secur32

GetUserNameExW

urlmon

URLDownloadToFileW

user32

EnableWindow

gdi32

BitBlt

advapi32

RegOpenKeyExW

shell32

SHGetSpecialFolderPathW

ole32

StringFromGUID2

oleaut32

SafeArrayCreate

shlwapi

PathIsUNCW

comctl32

InitCommonControlsEx

gdiplus

GdiplusStartup

wininet

InternetCheckConnectionW

userenv

UnloadUserProfile

Sections

.text
Size: 309KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE