c16c7d9ae9fbdc168fa419ae88eccd2e_JaffaCakes118 | Triage

Sharing

General

Target

c16c7d9ae9fbdc168fa419ae88eccd2e_JaffaCakes118
Size

144KB
MD5

c16c7d9ae9fbdc168fa419ae88eccd2e
SHA1

9df3b633c60163570161eb9d3ae1b096006df870
SHA256

f2d91fef698dcdb2520c934776cfffaba4747f53bc4203291db05c27c11e7b4b
SHA512

71de9125d5e56deba71c4b77fafb9a7b471c115cb8a2db12756cab7434249e8ba5d52a34b256ced59d3436020897af44f307318d1bb90f82c9f38486bbb3405c
SSDEEP

3072:ZB3KXBpO3qDeO3I01A4p2jRF38IHhBaz2KVEAG:nKXjO3QeO401ZiRSuTa67AG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c16c7d9ae9fbdc168fa419ae88eccd2e_JaffaCakes118

Files

c16c7d9ae9fbdc168fa419ae88eccd2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2bbddb8c010773f04c2d9dd29668462

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 133KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE