23aa5f4bb5bf1325940ece686fc0c1ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23aa5f4bb5bf1325940ece686fc0c1ac_JaffaCakes118
Size

183KB
MD5

23aa5f4bb5bf1325940ece686fc0c1ac
SHA1

71f6f75e9ec7d83cabfbde56aeb8c810a7d6ec33
SHA256

6f4ba480297e1ca96e3206540a60cba4609cd17b1a4728e9ebeb20fb69117fb2
SHA512

d8f1276abf76cd250830d131fa5a6ef502fb5c1f26461d7611c8aeb4cf5d777fa14d5d18ab5239bee36e63c74a5fd52035b3870fd7173c26e2f7513b76722a81
SSDEEP

3072:PLbWdfgbI1GQoCaXkuV5aSMXsRbBvkbG+WzlJP9U64sC7pWAuyu:nWdQkGQoC4LfvMuBvkbGbZJlU37Pu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23aa5f4bb5bf1325940ece686fc0c1ac_JaffaCakes118

Files

23aa5f4bb5bf1325940ece686fc0c1ac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b29d9179ca8a45f909f9b498a358705a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

GetKeyboardType

msimg32

AlphaBlend

gdi32

SetTextColor

version

VerQueryValueW

wininet

InternetReadFile

comdlg32

GetSaveFileNameW

crypt32

CryptBinaryToStringW

ntdll

NtShutdownSystem

shell32

SHGetSpecialFolderPathW

ole32

CoCreateInstance

comctl32

InitCommonControls

Sections

.text
Size: 172KB - Virtual size: 860KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ