86ef3a542fc95ee4506d1da68a122bf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86ef3a542fc95ee4506d1da68a122bf1_JaffaCakes118
Size

170KB
MD5

86ef3a542fc95ee4506d1da68a122bf1
SHA1

2e059a85a8e0065ec855f8dd42f803828631cdd4
SHA256

7e59bbfaa486a3b782c83f6b3279fa6d33ff02d47759243b5ec9f281db9d1d4e
SHA512

df8641a6376062cff8a253ca63dd689644fb8189630bb00f74ae386cd70b9dcc44dd71519439d6026d6f4c7b69813fb925ecb911bfc2e2bb84e4d25bc0cce5f7
SSDEEP

3072:hjjuFXbAVCFYLYlucjSWrvnou0Vy4LoRn9Y8s6CpWV+/foQXMmAIMD73:hjatbFYNcdrgu0Vy46n9Yl6CpWV+XdM9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86ef3a542fc95ee4506d1da68a122bf1_JaffaCakes118

Files

86ef3a542fc95ee4506d1da68a122bf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 137KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE