6a906b8774d12b52c0fb294d68ab4073_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a906b8774d12b52c0fb294d68ab4073_JaffaCakes118
Size

146KB
MD5

6a906b8774d12b52c0fb294d68ab4073
SHA1

de076c229f2117a56c79cac4b5e9f63e39b5a2fe
SHA256

81d77da06820b3122738883906612b78c1ca58024f718609e887fa9b4e13ebb9
SHA512

75ec1cce4b4523e87372982c9c6e4c9d16ce2b43c10d05345a7f915db315c593be54c8e922bffd9971d5a0e4c2c1145150088c74d1f318a038aec0ccf57d9278
SSDEEP

3072:NjjuFXbAVCFYLYlucjSWrvnou0Vy4LoRn9Y8s6Crr:NjatbFYNcdrgu0Vy46n9Yl6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a906b8774d12b52c0fb294d68ab4073_JaffaCakes118

Files

6a906b8774d12b52c0fb294d68ab4073_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 137KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE