cfb2a6df28539a00d7623b10ad527a1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfb2a6df28539a00d7623b10ad527a1a_JaffaCakes118
Size

81KB
MD5

cfb2a6df28539a00d7623b10ad527a1a
SHA1

59c8c3470397c373e523e825528227912bf426df
SHA256

d770c3d79a6f083b36f7517c0485c486b2c9956fbd7f60a892f39f14c891a082
SHA512

8d4b986922decacdec30d7b3227bfc7415b2d36f3659cfd9738c0b975f761623c5fe8892fe7086dd4761d2be1f5cca0e141a37b8f650858da05c94b9350df5ba
SSDEEP

1536:7rKSd/mMRAYK/vNIPZTQxbx1+I750a6gtbPAXzBTKg1S1/oQn3DBUwP:aSd/zJK/1IPa1wI7WctbQzBTK+Qn3DBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfb2a6df28539a00d7623b10ad527a1a_JaffaCakes118

Files

cfb2a6df28539a00d7623b10ad527a1a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8f63148c3a171d63cf52dfa18cadeab7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

wininet

InternetSetOptionA

Exports

Exports

CPlApplet

Sections

.text
Size: 70KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE