24ee9b77fee635f369dacb64dba17bab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24ee9b77fee635f369dacb64dba17bab_JaffaCakes118
Size

583KB
MD5

24ee9b77fee635f369dacb64dba17bab
SHA1

52c716f9689669958b65daf25a2cb9cc72a1a4d6
SHA256

c112ee0c9348b45e981740df6446d2312041e6070e31f3fdea87e41e7c61815f
SHA512

e20e5c7ab22f05943f6f23297904cdc2d5ab098c53ba11f34bd7d1c75dfe23c510e2e68abe1e2368ac80d6e8f56a1035fe2ec35bd1e2a357da777a070726be44
SSDEEP

12288:25SU/vr8Wt9gk6M+X518NUwTBubYJrnS+dItAYNde4RrraZ:ErvQWx69K4bYJfI/NdfaZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24ee9b77fee635f369dacb64dba17bab_JaffaCakes118

Files

24ee9b77fee635f369dacb64dba17bab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 568KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE