236cd127b94e43906ceebfff9459577f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

236cd127b94e43906ceebfff9459577f_JaffaCakes118
Size

509KB
MD5

236cd127b94e43906ceebfff9459577f
SHA1

7d0ce78e372f2a6b447d085865e7b6f3800706d4
SHA256

74ddc4d80096f55870bf05cce7d193cd790f0b5f9bf9f5a5a3511f795245efaf
SHA512

6345a6ed3e8d01633b89b50e5284f6f11448583a338617bc4ccb6419597b94766235fa96f02f3586bb71133a6a7ecd944b0ac6c805f3749564484564785d9b6b
SSDEEP

12288:tDvDb1lhOVjAxjsxC+mV1QojDhweM2X1I9bPpa2:tbDbThikJsxC/YODW1y1ID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
236cd127b94e43906ceebfff9459577f_JaffaCakes118

Files

236cd127b94e43906ceebfff9459577f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c27648cd5da090de6847ade5b0354a8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

CLSIDFromProgID

comctl32

ImageList_SetIconSize

wininet

FindNextUrlCacheEntryA

netapi32

Netbios

wsock32

WSACleanup

winmm

timeGetTime

Sections

CODE
Size: 491KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE