353459d4eea9b14bc57306035899419e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

353459d4eea9b14bc57306035899419e_JaffaCakes118
Size

507KB
MD5

353459d4eea9b14bc57306035899419e
SHA1

ec76dfa75f9d29819a341dd7f7b4843f26f7e53d
SHA256

c9be1e1ab654e6cf73c4700e29a1cb933df6fc2d45cc8c62bed4adb7197487ae
SHA512

ba452b04cae7d41e4a6774007460fe553d35d4c02a7d429b8ac3d5af7b9e197e0ea80b69bd1d7ceebe75a00a216898a6f390ee5624620e8399a259af83bd60f3
SSDEEP

12288:Ow3L9IVguDz8lRN7znF2MJxvDV3ISUvxtfWw5UsxXvettd+pMLorpN:Ow79IVguD4lrF2MJQSUvxBmnLoP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
353459d4eea9b14bc57306035899419e_JaffaCakes118

Files

353459d4eea9b14bc57306035899419e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 486KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE