bb7bbd396f84af378aaa9848220325cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb7bbd396f84af378aaa9848220325cd_JaffaCakes118
Size

155KB
MD5

bb7bbd396f84af378aaa9848220325cd
SHA1

730743fe2582919d6a0874c5d83ac735e7ffee03
SHA256

f4996d941640de353870a2467c3bf207a8ce734e0fa7940502b7b80bb99c10e9
SHA512

84f21dec234f4bfc40219fb94e1bf14dc9cae9275597b2a64f30fcccc37b851eea71eb27307236fa16bc92cb059c860418f0262c8cf9864089673656409a366a
SSDEEP

3072:d+owPbLUSo4EXCn5VBZ/EIQRDYBWjffXq0IJxFFI+6R+SmVVPjWLQ4dV1qTR3I:oZDIEEgTv/wj3X+JxFFI7FyD9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb7bbd396f84af378aaa9848220325cd_JaffaCakes118

Files

bb7bbd396f84af378aaa9848220325cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 137KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE