88884920c552c4a3fe08c8e75e0d7beb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88884920c552c4a3fe08c8e75e0d7beb_JaffaCakes118
Size

51KB
MD5

88884920c552c4a3fe08c8e75e0d7beb
SHA1

b361597e4c92cb12477382097cf28638e933a4d8
SHA256

1155726e6ef6b3bef0843f3b5b5cca560df2ca33b8b17e13cce08d957be59854
SHA512

feb715c73a40c835479cb2fda9478f94ef8d2935d81120b3df7cc1035bdc78f7d025f9ca5a3d986b4ff3b1a3943c8b0a4fd077c36446bd12529ca8b2430e2f2c
SSDEEP

1536:5IPC/4n6WuiYtuC0Hh+LpNsB/W7M/CySc:XA6WuxtwSpNeIMaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88884920c552c4a3fe08c8e75e0d7beb_JaffaCakes118

Files

88884920c552c4a3fe08c8e75e0d7beb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd321b1e97ddda73ac525120a887a6ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

urlmon

URLDownloadToFileA

advapi32

RegCloseKey

shell32

ShellExecuteA

user32

CharNextA

oleaut32

SysFreeString

Sections

.text
Size: 42KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE