4167a59b0285d872bafde0f0530e97fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4167a59b0285d872bafde0f0530e97fb_JaffaCakes118
Size

211KB
MD5

4167a59b0285d872bafde0f0530e97fb
SHA1

01b6dbf70c9338ff67e23e5cd178d5924c4df0e0
SHA256

0ab322ac356ae3715dca5298bb9aab7f31b309b5c471f0b94f9aeeb1ac7b694a
SHA512

8205c578b87f49157bfd223b629cb69f76a77ae42b909480f2411de433e79a900bad034aa6461dab248074566e5db96f48ce2183e6fb3f27d5b6ad0095fb929e
SSDEEP

3072:GjAkp2LFvmnGrYL+OdX1dhqdSiNiTY4MAdES+V0PMu:qAiyUI29dFmdSp3NUV7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4167a59b0285d872bafde0f0530e97fb_JaffaCakes118

Files

4167a59b0285d872bafde0f0530e97fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 132KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE