b2a44805a9e58fad676500ab73b113bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2a44805a9e58fad676500ab73b113bf_JaffaCakes118
Size

46KB
MD5

b2a44805a9e58fad676500ab73b113bf
SHA1

d8c4acddc87b33a284785f11c02a78770b46e491
SHA256

86d840664f701babb238c9bab41d826ceef8b6a55957a0091044e1cfd1ce16f5
SHA512

d0f490c1bfa826d9b0c9e5a8b51b0f0a47a1c0b49d0355ee46c5cb359586d456385b9fdcff52176aef14b0fbde777813c1dd22447c8d10771bc7c78e88d937d7
SSDEEP

768:jDyh6o8My/Ue/dEQXPCp7GVhjYQmp+VKDi195xz8f+xXgP3:j2F8MyXdbhpmpydnzy+hgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2a44805a9e58fad676500ab73b113bf_JaffaCakes118

Files

b2a44805a9e58fad676500ab73b113bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8bc2b06c4420b652f19d14fd3a807024

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

urlmon

URLDownloadToFileA

Sections

.text
Size: 37KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE