2f87eaf9d4843f8c440dbad1f5ab8936_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f87eaf9d4843f8c440dbad1f5ab8936_JaffaCakes118
Size

387KB
MD5

2f87eaf9d4843f8c440dbad1f5ab8936
SHA1

a7f95d783a02789437803cf0d780eb46f99ebefa
SHA256

a29398e55f474e8f6331389b308ae12e02711f4bcf9ae2f3d8fdfde62fb03ba6
SHA512

9a474eb9fe88f36775d8a922decc12d23c0bdd5b5dde31d37626afddb6e3c80558e870976dd72f0186b8fd007c06e7bf56d313c533dfde7f1c214a6e658841cf
SSDEEP

12288:AxqAt+vUC6j6WytpYzEMUtannF0CAA3vwCBI6Hc:UqUPs4z3nnF0CB3vvDH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f87eaf9d4843f8c440dbad1f5ab8936_JaffaCakes118

Files

2f87eaf9d4843f8c440dbad1f5ab8936_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3bc937bc21465ac75ec0f23e569c634d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

Sections

.text
Size: 372KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE