8833260f30dc5c72756442a188e3eaa5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8833260f30dc5c72756442a188e3eaa5_JaffaCakes118
Size

3.4MB
MD5

8833260f30dc5c72756442a188e3eaa5
SHA1

377e8accbf3b9bf119df9444151d91f08a078608
SHA256

8bd6d3c86a8fdbc631e19e4cf7119da84cf9f4f05706fb11fa32c22a47b795d5
SHA512

619d7609dca30ec20f1edd3cd39221e3db50abf837d6f25392a3adcdf49754b2503d2e3c531d4b53dffafe8fae78bbb245c09d41e9acacb6524b7abab8c313e2
SSDEEP

98304:J7KU/k+FAyON50zdRklbcCGwdkIMPMAsAHE6A568+pk:lK6AyON6zdR02IMU7IC68O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8833260f30dc5c72756442a188e3eaa5_JaffaCakes118

Files

8833260f30dc5c72756442a188e3eaa5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfac1184cb3a165b0ce40984d578c836

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

Sections

CODE
Size: 3.4MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE