46791aaba15f9ff15741592caec63700_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46791aaba15f9ff15741592caec63700_JaffaCakes118
Size

42KB
MD5

46791aaba15f9ff15741592caec63700
SHA1

85d2516f61092bfb0c372c992e4f8130fe320f62
SHA256

de4fb35f081c85a853f7d066a91a4eb5855a285a6273651557435781062e4715
SHA512

b9c596d0d1c9c504e3f9777cec3168dc5fa7cdb733618b364c82dc91f0ad7898a23fd4e039c3f68773fec89f5be32689abcf92c277ba79f4cead8c6f04c03fe0
SSDEEP

768:3t52BhlwjtH0YU/DvAqThVYeZGFiVNFsdbT1MnF/R2LtPNbTzD0dvE2J:3v2pwjJ0lD1TGoVNFqMnKP0dvE2J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46791aaba15f9ff15741592caec63700_JaffaCakes118

Files

46791aaba15f9ff15741592caec63700_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 34KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE