2dbd655bfb98c0b90c5de0dd17813239_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dbd655bfb98c0b90c5de0dd17813239_JaffaCakes118
Size

196KB
MD5

2dbd655bfb98c0b90c5de0dd17813239
SHA1

fed63ab533cc63faf4da288acfe4d23070b7a071
SHA256

6432cadcc2b683f11bdcddd003b2f8382b3cb4ea36b78f2ac7c43edc6cf098f7
SHA512

0a86f74e5e5769ea7408a88bca7107de4846e416d433d925230731e27f80b4ffd31830771750892f6ae3560d06c0c6fa0279aa86acb7673f46929febdf0ed4e9
SSDEEP

3072:kGi9zMR8AhxHX6ZgtlHXD70ElwSmzWNzcuFHLPcdyp2y54RAQ:i9whpDHXD75ySoWF/ZTtpB5pQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dbd655bfb98c0b90c5de0dd17813239_JaffaCakes118

Files

2dbd655bfb98c0b90c5de0dd17813239_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25d7de41e6cfa527b4935c3843e62849

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetCheckConnectionA

Sections

CODE
Size: 185KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE