02a43d31fdc2e6bd4f3028f180478671_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a43d31fdc2e6bd4f3028f180478671_JaffaCakes118
Size

152KB
MD5

02a43d31fdc2e6bd4f3028f180478671
SHA1

e55db10b7fb2ddeaed3c4897cbdc4346d4706cca
SHA256

f27660baff646d1ca1f5a9ed160ff14062cc65509c8866c85e9456aa9d28e92e
SHA512

68d56d121c1dcf4de83cd9a43f9c69b9d66ee21e2e5b4dfc9230416f22717634014f556db6560326affdfa928abde7ed35a50ff794c41580b031575902aa4719
SSDEEP

3072:Nvp6gx4+pWM8KV+b6wJKMrGkgYQKrN7ZH83KIKglC8W9p7fUwAR3N:Lv4+pOKO4MrdrT8v5WDfUVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a43d31fdc2e6bd4f3028f180478671_JaffaCakes118

Files

02a43d31fdc2e6bd4f3028f180478671_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 135KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE