e2ca8caa0edcde8e76d9d40423c86328_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2ca8caa0edcde8e76d9d40423c86328_JaffaCakes118
Size

1.6MB
MD5

e2ca8caa0edcde8e76d9d40423c86328
SHA1

b027782e1648d79b0a4576fca64a9134d7f26570
SHA256

c653363e32c593cc3f1552d0021f7c906311106d1fec06ab1a8f040b00b619b7
SHA512

9d579a50b1f3e295233fab4e95bf8a1f7fe31e88b745444bf7cc64c8767a4cd84c6fd9b310c216ce942986ec516939b98c78e68fd810b891bdedf1a6e55fb9b5
SSDEEP

49152:U6MPyQ5yPLemo7kHZ4hzQc/Ll9bcqLKekQR:U6M6QoGI4yoLfQq+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2ca8caa0edcde8e76d9d40423c86328_JaffaCakes118

Files

e2ca8caa0edcde8e76d9d40423c86328_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbea47c0cd6af6c443ef1ef9e0fd8223

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

CODE
Size: 1.6MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE