661082999dcc2f9fbaed65b89539285a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

661082999dcc2f9fbaed65b89539285a_JaffaCakes118
Size

89KB
MD5

661082999dcc2f9fbaed65b89539285a
SHA1

1bdce3677c5f447a7ed9d9b4caf8a8c39a44d4f9
SHA256

80edd573eb7b8ebad35954ea2a07433c3b618213d22a899a8a264f9368a5729a
SHA512

68ccb650ab7cdeb5a7e1c83e0c18103aaa568f110982045d0906663efd9bcd580d575990177390f3aaa266b15403eba694ece0506d2b1e013b76b0d0a4cf9b3d
SSDEEP

1536:q8gm0E1/dQK1FAi+ybRshT5A+SeELCchuZ7VQbHSqVD2QkdQ4jU0VRrKK42:qE1/dQKchS+S12chuZ7ibHDD2C+U0Pr9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661082999dcc2f9fbaed65b89539285a_JaffaCakes118

Files

661082999dcc2f9fbaed65b89539285a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1900879c98b4a96d399d6ce626330c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 79KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE