f71b7f7178e538c7c56f46fce7335198_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f71b7f7178e538c7c56f46fce7335198_JaffaCakes118
Size

234KB
MD5

f71b7f7178e538c7c56f46fce7335198
SHA1

646c8f16b7428e94f14fedb9bc0ccd81a971c269
SHA256

95148341a86ec3663af3c503d395df0553cf7dc21593e673eb20636e59fc0dd9
SHA512

db3f77600d529d6fe96ef59a82032b55c535f22d4e1ce136a901f53eed46ad9593c0608f61ead0828cf2d6edba043f2bd4a990335e5fb2984444b4d5a75c2768
SSDEEP

6144:B0lBIt7PrQcvE0OMBXPKFojifCDW/bbd/2rp9Oj5e+:Goz81BMlAoDDW/bb9Im5e+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f71b7f7178e538c7c56f46fce7335198_JaffaCakes118

Files

f71b7f7178e538c7c56f46fce7335198_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

ce6c6f6f01e9d913e2427fb644a3dc45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetSetOptionA

Sections

CODE
Size: 226KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE