6440782fe9c2403291b31ea7cdb88550_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6440782fe9c2403291b31ea7cdb88550_JaffaCakes118
Size

3.2MB
MD5

6440782fe9c2403291b31ea7cdb88550
SHA1

1176ebfcc9f493c96c06ab3f445b09c417b48211
SHA256

ef35e5463e65b09bb7a1d0d78972f9353552f5da987757bb005dcf93098098d7
SHA512

a3b583df55749e6110ddf2004c4ace67b09ed285b91a0f562a337aa30c8332bd161552767d4a55ac8e05450c5d43f2c3042a6293e65848bbe3e2f96fa5001621
SSDEEP

98304:wnWqaXvOkMWWgw++xkDJdcxrzfHaTUtmaL:wjovVDX+xS+rDaWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6440782fe9c2403291b31ea7cdb88550_JaffaCakes118

Files

6440782fe9c2403291b31ea7cdb88550_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfac1184cb3a165b0ce40984d578c836

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

Sections

CODE
Size: 3.2MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE