b1e054fe5972a57c29d14875ac9cc6d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1e054fe5972a57c29d14875ac9cc6d3_JaffaCakes118
Size

17KB
MD5

b1e054fe5972a57c29d14875ac9cc6d3
SHA1

14451c11634c0252fd3e76648dfb2a2f94296774
SHA256

071ea8738684362ba8711fbb08e8d3fc904af1c4a56dad7710ec49f34fd3f39b
SHA512

35fbbc5368bef34c3dc233ad5b856ac789dded28ba3eb9cca651b2770644174cdd8ce86a2b4b895a38723a8e7390c3438c62d09a39d7f364371cba2b08c837f1
SSDEEP

384:IMA0v+WubmZhDsy5gXd+Vw2Ko8pSVgjFZwri5byrI:IT0vzubmZhDH/Vw2KbDQC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1e054fe5972a57c29d14875ac9cc6d3_JaffaCakes118

Files

b1e054fe5972a57c29d14875ac9cc6d3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7a7e08e8cf1fba59650b06a1cd02232a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantClear

gdi32

SetBrushOrgEx

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 13KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE