2740fd9dd99a0e6e2ff2ffdc4c66ea08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2740fd9dd99a0e6e2ff2ffdc4c66ea08_JaffaCakes118
Size

725KB
MD5

2740fd9dd99a0e6e2ff2ffdc4c66ea08
SHA1

4b6fad7664980a63518d948f1d0d1c5dc64afbd1
SHA256

ce7a6413be58b8f32cebe11536b2da3cd31dde1fa84f6fc7852dcfa155ea8bfe
SHA512

25d12a1bec5daf5bcb3fc05c261250f52fad0f2efdb67602349e09a16ae136e64da89ce7c127dacece0efa1e73ca65de61d769def09c9d3f5c836d939f93f9a2
SSDEEP

6144:dpHtCOCuAZJqZhgR8VS/HthcFlkz7usSsQLH5Aa:rtJAjQhBU/GkzSsPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2740fd9dd99a0e6e2ff2ffdc4c66ea08_JaffaCakes118

Files

2740fd9dd99a0e6e2ff2ffdc4c66ea08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83e3e33408ee40c93ebfeb31cfefe8c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

jxhook

UnMap

Sections

CODE
Size: 217KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE