7534aa0678445d0d9bf9312b89a02121_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7534aa0678445d0d9bf9312b89a02121_JaffaCakes118
Size

58KB
MD5

7534aa0678445d0d9bf9312b89a02121
SHA1

8b9fe8c7d6fa62379c8598afa29cdbaf0fe1654b
SHA256

2891877eb22dd32b5328b56242923977b3d18290a2f942814016b8d6563fa547
SHA512

04faf77bce055bbef8696948eca2e45f7aa7873346dee2fa208daa03f6d0b8c91c6bd300f1776d393d698f56ca9d4fd48606b2381cb770903d06e22d7b5e7da2
SSDEEP

768:Pd5//LDiI+RtQoGTDsazR4HmMOFqC0xs1wFy9oJFeFqU2powYVY93Vktml7+H61I:Pd5JXDss2HmMlCwK9U62ywV93cmpo8f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7534aa0678445d0d9bf9312b89a02121_JaffaCakes118

Files

7534aa0678445d0d9bf9312b89a02121_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd9de839b47f07a8bc8c4daff54ec444

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

wininet

FindNextUrlCacheEntryA

Sections

CODE
Size: 53KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE