ce78aa02d97bdb0d27f03441c66aa8bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce78aa02d97bdb0d27f03441c66aa8bb_JaffaCakes118
Size

167KB
MD5

ce78aa02d97bdb0d27f03441c66aa8bb
SHA1

05f4d77b0413c86d01dc607df9fca9c6efa14d8e
SHA256

f4dda30c0e327a78e386e61c3a6794400c38fcdcfe2aadcf19101da8c60ac325
SHA512

5475c348cb1fd7e6995ba553536f75ae23973a5216f7a50c31ee18f4f7071d320a909f0cdaab12f60d8f931d3926ebab77f0116ad6fecfbd823280479eae462b
SSDEEP

3072:ZyPMU8c3FMSRyLHJbasmWlk3edT3djLa2ww2arfNYAMJAb8gOSMwNPjcO:ZyEXc3FMSRwH9/Sc3N+2wwPlh6AbHyw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce78aa02d97bdb0d27f03441c66aa8bb_JaffaCakes118

Files

ce78aa02d97bdb0d27f03441c66aa8bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a37750828a5ef4a08aa843e6963a402b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 157KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE