0f257a2a6b5a4f895586acc3880969c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f257a2a6b5a4f895586acc3880969c5_JaffaCakes118
Size

183KB
MD5

0f257a2a6b5a4f895586acc3880969c5
SHA1

ca438f6ba4dbad8bda6dd1821c080ca2f8a42705
SHA256

1db5c77ef67f0cb6c703385c4d6226c1b1c5de7387d6c77bbbafd23878263df3
SHA512

43f358436daabc23dff285adc6aacc2b8177fe462383ea9348aa06fb5583319325211078bf1f05b3ce4d0a116b9cfae0f46443c427f6face5f7beaa03115aec9
SSDEEP

3072:0JsWixp5dilnp5stUCdIQOxO/L9dzRou+l22K9UwoAa6lHtPXWDMrH:01VjgtT9E/22fq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f257a2a6b5a4f895586acc3880969c5_JaffaCakes118

Files

0f257a2a6b5a4f895586acc3880969c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2bbddb8c010773f04c2d9dd29668462

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 158KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE