efff95eb064c574d15c9cd9fb6c741c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efff95eb064c574d15c9cd9fb6c741c4_JaffaCakes118
Size

1.2MB
MD5

efff95eb064c574d15c9cd9fb6c741c4
SHA1

64193ddee82912b5393e4a67105c71e0f660e221
SHA256

546890a308cb0740a2e17362bbfc471d8552a60389cfd550ea18ea3d17fe0b6c
SHA512

6ce7c1a902cad1995a75439a20a17043de9347e739875e4c187bbdff7d94175ad9cb9d7b9a6a15f3d4795de4cd61bc8793dcf469224548042d69c128ae568dda
SSDEEP

24576:tuuJ8pAy7iFKG4PqcJqe+OzqARi4l/ywU5/uHEmIUisuWXdVtpUQJ6z65QqovIun:tZj+574GqARiY9Q/aErEhDrJ95MA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efff95eb064c574d15c9cd9fb6c741c4_JaffaCakes118

Files

efff95eb064c574d15c9cd9fb6c741c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e13f8d3fc6ea8c0dab111694dc4906b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CoTaskMemFree

comctl32

_TrackMouseEvent

wininet

InternetGetConnectedState

shell32

ShellExecuteExA

Sections

.text
Size: 1.2MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE