ec19d5153436a60baae27a24a72a92ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec19d5153436a60baae27a24a72a92ca_JaffaCakes118
Size

249KB
MD5

ec19d5153436a60baae27a24a72a92ca
SHA1

40b61def5740d059e2dc5caa7b6d5e14ce5907f7
SHA256

73dd8668fdc93ca2ad8434633b82c40c56ec24ac915fc0e74c3d55d53f023892
SHA512

572932221265c1e23675d3414d39caf14cd1d8d83707f9cf7bcfc0e68efd13bb4cbe2e0a2e09aa1e00544aba6b592dd3b8528e79d746aebf4a0ff55290bcfade
SSDEEP

3072:Q8jOH8t3oA3jJIEUJ9yk7Z0DPvTsGzPXPEIwows91NFoYZ5GgO7Nj:Q8tmr9r4Prj3ul0Ping6F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec19d5153436a60baae27a24a72a92ca_JaffaCakes118

Files

ec19d5153436a60baae27a24a72a92ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1887b98273c6c3f6c16f8ea97b2b974

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetReadFile

Sections

CODE
Size: 148KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE