07c2954ed7c9c27102b1d1e1933dbcfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07c2954ed7c9c27102b1d1e1933dbcfa_JaffaCakes118
Size

746KB
MD5

07c2954ed7c9c27102b1d1e1933dbcfa
SHA1

4baf8b0cdb55b7edfd5328d59e409c10b212a646
SHA256

88d2e7b161dc99689964d8a9a6786daa4843bb20b6625703eecb8b178b4107bc
SHA512

1786054d1fff61a5af83c839f9c69fcd081c78e7c86be0c361a51b23c894e7f95f68c4a5135a293ffc358dd3b4c1714285859916f046f4867b58d935195548e1
SSDEEP

12288:XGBnlxTUtBwyZAX+QHGlCHn+r4ntUywSn9amVYRUFxjZRrUrhszQDs6X/n1:XGVvT+BwuQHiC5KzSnRYRipUhG6P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07c2954ed7c9c27102b1d1e1933dbcfa_JaffaCakes118

Files

07c2954ed7c9c27102b1d1e1933dbcfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43d84983dccd48e4c4d7426d4e451fd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

wsock32

WSACleanup

Sections

CODE
Size: 711KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE