324aab13a08e771427f1d890ece14bf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

324aab13a08e771427f1d890ece14bf9_JaffaCakes118
Size

241KB
MD5

324aab13a08e771427f1d890ece14bf9
SHA1

b133477bf3431521a59ee6af22c466406595c3a7
SHA256

2d6aa0b2a1a910699477811dfb65d14b3f394d2a654f50922864297125850350
SHA512

da4767b8341f4356c42aedc4dabbb55f89ed2e60e8324ac4b52b8532e8808b75af24697ba984796d1b765143e971f49e851e51d298d4999886609679ca0d0f95
SSDEEP

6144:ctE3yiKRDRs0gohMBBbS8u+6G+V6jzl826pMGgIQQ:EE3wR/zhMBBb990Uu2AMHIQQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
324aab13a08e771427f1d890ece14bf9_JaffaCakes118

Files

324aab13a08e771427f1d890ece14bf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7cd6d46549a6de4302a1f994602a2b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

urlmon

HlinkNavigateString

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 231KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE