176ea5cd0ac2a674c76064c0bc38d026_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

176ea5cd0ac2a674c76064c0bc38d026_JaffaCakes118
Size

12KB
MD5

176ea5cd0ac2a674c76064c0bc38d026
SHA1

15e1c02dba9bb2f8d04c05195a96b1996e750736
SHA256

e8250ca487e41829f4cc102e993a78b0ee33b22bce2532d661e35f977492dd58
SHA512

e5fb60894bbd694924c71cd125ec3cb40cf996e38f57c7bdcbdd8b29dcf639cfb450062cfa2585091a89db4aa24ff0baedcb3a1e3ce446ab415bfca0e1d8d67d
SSDEEP

192:n1CB7qoUFbAauFwXaZE/CaaKZJE1ujiehlp2HJrPtAvCzZx:1CBefFsn2aZ3ruE1wLhlcHJxAvCzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
176ea5cd0ac2a674c76064c0bc38d026_JaffaCakes118

Files

176ea5cd0ac2a674c76064c0bc38d026_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0da4dd73046bc6d5b5016359127d6fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 8KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE