b009cd2b57d3700b264ab57d5ca8803d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b009cd2b57d3700b264ab57d5ca8803d_JaffaCakes118
Size

182KB
MD5

b009cd2b57d3700b264ab57d5ca8803d
SHA1

10f3433492167628a920c79822215fdf106e291a
SHA256

7e913d96b8b10e26d2ca04fed91c37fdabf2023e7c2ff0cadbdd8bd566cd04ef
SHA512

b952a1314c408f0a530e99fcad05218b867f21e0fde9e64c6a03bc6df2b439686e3cf8a550267cacaeb05a604a30cb38394183db6e2bdd0e14506face4a2da87
SSDEEP

3072:nF1lN81d+Z7K11+nIInT7+X17bikixPZtNAx4QHY5QE4wkjM3n9pC:F1f8KA+zTyALxPZzU4J5BkGn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b009cd2b57d3700b264ab57d5ca8803d_JaffaCakes118

Files

b009cd2b57d3700b264ab57d5ca8803d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb4db113c5a56ee94f8df37f9c6ae56e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 144KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE