eb319875417822203ef8719c4a8838e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb319875417822203ef8719c4a8838e5_JaffaCakes118
Size

265KB
MD5

eb319875417822203ef8719c4a8838e5
SHA1

3328afb11a402b2cd4b72e9a56a214ce63434b17
SHA256

91ee1692514fa5ace76d718cd4c3485097375300e84f870de03f8306c8dab2a6
SHA512

52103ff02a50a2126fd8ba09d6dbac23a8ff4e01d3294e16eb90ae5613d6a25faf6d1e046b0daa941cae6ce6b91fa5e461c7e60fc1c225f8a874ddbcf5b7b5cf
SSDEEP

6144:No70GwhCaBx1eCSePD3TQqOhIDLJABq9OnHnSaW6sGpQkRK:q6ka9eWDD7wB3nHnSX6/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb319875417822203ef8719c4a8838e5_JaffaCakes118

Files

eb319875417822203ef8719c4a8838e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

847e22c0ee3a03a74d9fbf3af9324f9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

Sections

CODE
Size: 231KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE