bc16fb1fd57b9df31ef796794bc93da9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc16fb1fd57b9df31ef796794bc93da9_JaffaCakes118
Size

585KB
MD5

bc16fb1fd57b9df31ef796794bc93da9
SHA1

73655a6b55216687a9e6255f2cdd0755f930a46f
SHA256

99c9a76b98a42e12b5080ad8e06f8e170859ab4be09f48a5870c8f7784ab7b16
SHA512

9b140037076d1c32e29edb8c6f2dc3029ba0203fc3d34875ca6a343280a1a2d84c36aeaf70c12a763010b32ef151ff37c629f826e29dab310c22bb462631416b
SSDEEP

12288:Xnuid1TjTkyz8V2ijwvdKGU15RlQJePEq7mRiZsxve1NjA:XueHFz4vjwvdKGU1hQfwiiZ4v8N0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc16fb1fd57b9df31ef796794bc93da9_JaffaCakes118

Files

bc16fb1fd57b9df31ef796794bc93da9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

321d3814c3f3c0631ad88342d61dda09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

urlmon

URLDownloadToFileA

wsock32

WSACleanup

winmm

sndPlaySoundA

Sections

pec1
Size: 243KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 339KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE