245f7c07c5d9ba903ab0773d59915387_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

245f7c07c5d9ba903ab0773d59915387_JaffaCakes118
Size

486KB
MD5

245f7c07c5d9ba903ab0773d59915387
SHA1

a3ead249360a54085606b6b539b619235fabd461
SHA256

cad822a7505ff4066d170c2a5cfd8f6637928061c6ccaa534c519d06fcdca6d8
SHA512

2ec76259d75e3864a72957670710905c57b85cef6369702b993edb7f5791f69958d58918de6ad89f1b84380cf4c930730a4fdb918005b7ef126d8f7cddf3f342
SSDEEP

12288:gXUMfy5lKhvL3xDDFRbzqQP0ZXbaSTH5TGNVK:ga5CvjNrzq/F/lToVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
245f7c07c5d9ba903ab0773d59915387_JaffaCakes118

Files

245f7c07c5d9ba903ab0773d59915387_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e251db23fa4ddc2fcc8175f3cfabb605

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

winmm

timeGetTime

Sections

CODE
Size: 476KB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE