bbb86b43577743359eacee2053e66872_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbb86b43577743359eacee2053e66872_JaffaCakes118
Size

28KB
MD5

bbb86b43577743359eacee2053e66872
SHA1

0e280adf441cf40424b23da5375070382342c36d
SHA256

c3292fd66bc273bbf1313774486278494223a57056e272972f45bab5a745d5b4
SHA512

4ad60af7dc9099a106b4f83bd009234072d7e55714255124f1ac321daebaa0dc5aa5f91dcf841b8247de7e67b9c5652ef31150352270d5d9129eefe7a4d05dc5
SSDEEP

384:CWVONPopN93OpZAdRywjnxGjHRVR5LsJSwELcaXs62TDD2Tg36R8vqReuSSQNECO:IvwjxGbL4G1Xs62nqE6Cq/SDECtg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbb86b43577743359eacee2053e66872_JaffaCakes118

Files

bbb86b43577743359eacee2053e66872_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18ff2195c7aca668aaf97428a784abc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

gdi32

GetStockObject

urlmon

URLDownloadToFileA

Sections

.text
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mmym520
Size: 48B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE