a79f9151a6fcf4bdb01d263f56f546e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a79f9151a6fcf4bdb01d263f56f546e9_JaffaCakes118
Size

52KB
MD5

a79f9151a6fcf4bdb01d263f56f546e9
SHA1

076c6552fe84149843eea01741ee4d9ab2f3477a
SHA256

63c4c740d7c7868b7dd1dec2f2ad9b325741d0cfc01d1f723bd93918291c3fee
SHA512

cb59a185b0b54cd164d6379ee588381238d8d8161c18b3299a5799d9f96fbf781967a83113de1404b3449605130f22f8bb6022e4d4173fe3bb8e5152f89d87c7
SSDEEP

1536:Gy6NLyY1+1xQBJYihBXTSn5JnyMLlENcx7Ot:MNv1+1xQ3YqBoEMhQoI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a79f9151a6fcf4bdb01d263f56f546e9_JaffaCakes118

Files

a79f9151a6fcf4bdb01d263f56f546e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd321b1e97ddda73ac525120a887a6ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

urlmon

URLDownloadToFileA

advapi32

RegCloseKey

shell32

ShellExecuteA

user32

CharNextA

oleaut32

SysFreeString

Sections

.text
Size: 43KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE