76b6524b745c10f679333f1f14dc1980_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76b6524b745c10f679333f1f14dc1980_JaffaCakes118
Size

23KB
MD5

76b6524b745c10f679333f1f14dc1980
SHA1

0417775f9cd77afece7d32823bc413794a0d4fa8
SHA256

fa7025809bc43799d9bc6f1b59d356c3f56cf6c4b34442dba86ccb66dbe0d34d
SHA512

50c4c8cdb9a333209c10ab2c96f0f9537105cd3a536ab8f9b5b188896b7be9ac65c61feea1a0e704cff1f1bed0c21fcfc9c8e3a1efc6ded07d4ea18743380d5a
SSDEEP

384:W9NiGNL0DuFN0mz1KgaZJDE0Gvvenh0GQ5jArYyxjCEE7SDwpNT9KSX:WhViC2Vg2JZVjnxPwPxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76b6524b745c10f679333f1f14dc1980_JaffaCakes118

Files

76b6524b745c10f679333f1f14dc1980_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 19KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE