0ca10d2f88acd69eff7dea9ea7cbfa09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ca10d2f88acd69eff7dea9ea7cbfa09_JaffaCakes118
Size

3.1MB
MD5

0ca10d2f88acd69eff7dea9ea7cbfa09
SHA1

75ee8bc7b1806781aa8f31520f7deb6f5e1c8446
SHA256

c11b548733c23a559228140eebabf497523f25cf1d74d035ed5e77839e5887ae
SHA512

55ed76f2202f216b9fcdc6f3e9f93e10709b7cd50ce372d6c2394efcfebbe4baaedf13ffd3295906400eb3c2c4d02c906461feb3d8d1478e75a098b6c35b4a3c
SSDEEP

98304:1GrAsXgjDSdBs4UFuBa/ZkKCJfsMKh7GcyrL:1UwSbU2hJUMKREL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ca10d2f88acd69eff7dea9ea7cbfa09_JaffaCakes118

Files

0ca10d2f88acd69eff7dea9ea7cbfa09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 3.1MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE