653eb5ac2a46b590144bcb61fbd42fc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

653eb5ac2a46b590144bcb61fbd42fc6_JaffaCakes118
Size

47KB
MD5

653eb5ac2a46b590144bcb61fbd42fc6
SHA1

a1b252996b56e4a90e3eeb6bbc0755ec000a9eab
SHA256

fb9f937d9b6e83643837dac495510637e4edbab9328326002513c0d74549261e
SHA512

74218001a66b9c371ff30a539589380041ac057b24f198c105bdc00bd74b375809409cef3585b0d9811f552829ae9658476e487a81fb5af8edd9b3f22e044cba
SSDEEP

768:vuQF/W/H38fjBZyAA1nMdhvDP8u5NbNf0W2ozLnmR+i2wkxsqXrU7vy6QvsQFuA:2QFy8fbLAMDvAybV0yzji2wk+qbovy9/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
653eb5ac2a46b590144bcb61fbd42fc6_JaffaCakes118

Files

653eb5ac2a46b590144bcb61fbd42fc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4da702f9b1d5061c0421b91bbacedc65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 35KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE