db251980e2d953953f4b5f78c68d8d25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db251980e2d953953f4b5f78c68d8d25_JaffaCakes118
Size

3.7MB
MD5

db251980e2d953953f4b5f78c68d8d25
SHA1

1507d62ab56748b95100f91a9c812a060df99d0d
SHA256

79e02580af37c8ef8b367e4def229b38561b485f74c498859796bb4e152f1a87
SHA512

9e60631a14b8e207804a4bdb996223e088c960e038868b26cc9f9e9587188a6f5f868a66fd12b8163b9c20e5d37798e77f584eb18306a4ce5a45da61d1860fd2
SSDEEP

98304:LogG0dx0oUGSls+pXoSiMnAdYUnOdghTErUbr8:LlPdmfGe1pXorMnAdYBghTErUbr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db251980e2d953953f4b5f78c68d8d25_JaffaCakes118

Files

db251980e2d953953f4b5f78c68d8d25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfac1184cb3a165b0ce40984d578c836

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

Sections

CODE
Size: 3.7MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE