329422ba1305160821e48d561609b7d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

329422ba1305160821e48d561609b7d7_JaffaCakes118
Size

155KB
MD5

329422ba1305160821e48d561609b7d7
SHA1

64e33ee7af072b2c2130716dff5001888b60bedd
SHA256

336e913e314f4cc85ac9a3418acad6dc6e84bef8a83f468f7e4aa0bd39979f74
SHA512

69cb2dea1184e75c3c18041ba14a49e05ace9c302d0b30d82ebe981ce23c2e767bc4fe534a17b91e6a86444175205d2ce57286a2b877f383a1a8f24aac4a9c1d
SSDEEP

3072:E4fMD6JZITogrlHApGOuyLhiLsarz02b65XYRV+8uzCRh63:ze6wToWgpGm8gaIXpFCr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
329422ba1305160821e48d561609b7d7_JaffaCakes118

Files

329422ba1305160821e48d561609b7d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7652ffa60974da39227e039bb4c38372

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

HlinkNavigateString

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 143KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE