427c3225c0f718fd7627da5f4d0dee75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

427c3225c0f718fd7627da5f4d0dee75_JaffaCakes118
Size

41KB
MD5

427c3225c0f718fd7627da5f4d0dee75
SHA1

bbbd664f1a3b7b822a2acf7550134b06285e1104
SHA256

e03f6385063869c882b60868a28718a3b2b584d6203bbfaaaf14afff4b988960
SHA512

2b46d1304332f6533a3d7186e59a95dddf0e342fd492f0c4cfbc4fedacbf16b3f93cdd376a6fb4844b87f990ded2fb27d509688813edf17d69c07a1a46927d7c
SSDEEP

768:nPGClw3dZKvjW1ZDew//38YmoQco2s2C2HfOozZP2loJdYeDk:nKd87W1RH8Eo1HFozZuloJdhY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
427c3225c0f718fd7627da5f4d0dee75_JaffaCakes118

Files

427c3225c0f718fd7627da5f4d0dee75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8bc2b06c4420b652f19d14fd3a807024

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

urlmon

URLDownloadToFileA

Sections

.text
Size: 36KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE