1a2c5bb28efae317ce511bee4fb47993_JaffaCakes118 | Triage

Sharing

General

Target

1a2c5bb28efae317ce511bee4fb47993_JaffaCakes118
Size

1.3MB
MD5

1a2c5bb28efae317ce511bee4fb47993
SHA1

c6a73e6129444340e5449122b1ba5f6c7e7c0fdd
SHA256

a0341a29a8cf8df91b05a98620efeb6cea40eae29a860b71152a35ff4e5845d5
SHA512

7b1decef749637bfabd04a72fcb11c2e8f5334a1cab378c501cd5e151aa138d71410fae1e7fd06e59653f922caedba7403b13934d9581b616431e4aae4bb68a8
SSDEEP

24576:MkL9Hx+PgIAw8T78cWAdu6qrl8x9R5t1ndN8reYd5BKMNNkISh2u:MkLBx+Pgnw8ThVE1rl8xBbdN8renMPch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a2c5bb28efae317ce511bee4fb47993_JaffaCakes118

Files

1a2c5bb28efae317ce511bee4fb47993_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7774473c6712330e52e7d1f51c9b75b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

UninitializeFlatSB

shell32

ShellExecuteA

ws2_32

WSACleanup

Sections

CODE
Size: 1.3MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE