969797ce152c93d4c2791bd829583560_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

969797ce152c93d4c2791bd829583560_JaffaCakes118
Size

80KB
MD5

969797ce152c93d4c2791bd829583560
SHA1

0e0c94fc88cf3d0fd9f27a3f852dcaa111740a0d
SHA256

eed3085f791e831aaf5bee3ac374c94b5e95a0729cdb6eb52ff2506fd6c9f076
SHA512

f40cb34c6a5ca0eb92fbc29d082e0d5565f9f08f27dc07183eb6e8d52e6e18e7e52c5103ea6828ab232111452e6767a73be13c10e599352e2a8b0ef34e5c38f9
SSDEEP

1536:UkEpWm6Gi2mvHrlbmOujIJak10vH+corXmhnHdYLpfzoCZ:UkE/hZuxqO+X40veI9YL1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
969797ce152c93d4c2791bd829583560_JaffaCakes118

Files

969797ce152c93d4c2791bd829583560_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd9d1907f7f60a8bdd9e787637cac88a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ole32

CoUninitialize

urlmon

URLDownloadToFileA

wininet

FindNextUrlCacheEntryA

Sections

CODE
Size: 74KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE