33015968659ed1b29a724b88925d1113_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33015968659ed1b29a724b88925d1113_JaffaCakes118
Size

3.3MB
MD5

33015968659ed1b29a724b88925d1113
SHA1

94f903048672acdb7cdb3574577e57a081f20d77
SHA256

07d2b169bb0dbff58feacfd4dc2c246ed56c286346313731fcbc7a825843fa32
SHA512

129dd15d298db4c967b58335d664c4d8660e18b1e8117c14b202c1bda71fcd3efa23accc07338f47606e8b4a0b87991b2d0632c2f07fa96b909d60573b37110f
SSDEEP

98304:C0UGyk2xFMy8TQ9WPTXUXQ/ohwugyVYtpgbp:Ci/y/aPPog/Wb9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33015968659ed1b29a724b88925d1113_JaffaCakes118

Files

33015968659ed1b29a724b88925d1113_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16ddf9b1390c8bf7f7fde96c95b68f26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

CODE
Size: 3.3MB - Virtual size: 15.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE