ff1f029bd2d8cf7edec1839e718fdf9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff1f029bd2d8cf7edec1839e718fdf9c_JaffaCakes118
Size

178KB
MD5

ff1f029bd2d8cf7edec1839e718fdf9c
SHA1

553a4952591c47a90e1de1a6d7ee752135e77df8
SHA256

3192649a2f10ef562e3bb64ff5dc10337057061ab5875a7376456010b4714141
SHA512

59707aca58bfa0eb3384a7da4519fe76965ad638e1feac48762f8f41e3a3425996dfc567eee5c1b24a3484f0487c108103c18b71e62bc29bea2280b2b36df267
SSDEEP

3072:5kBG/dQsLGVIzCMz+tQlqDJHQvYr1U23Yl6KtAUgWYacB3e:56GX6XSyQMJHy6k6WBcB3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff1f029bd2d8cf7edec1839e718fdf9c_JaffaCakes118

Files

ff1f029bd2d8cf7edec1839e718fdf9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88ac3dacdfd6958efe3ed6a378a77ac1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 146KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE