35e7442dd1c903860c5958a53cc184da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35e7442dd1c903860c5958a53cc184da_JaffaCakes118
Size

3.6MB
MD5

35e7442dd1c903860c5958a53cc184da
SHA1

08b222c521e521244d30e410b2cbc0efa1dde29f
SHA256

00d80dd10b82eeabb0a7fee53e93e167a58359854d99dec1088ba6b92a9d479e
SHA512

5b311e83d3fc41c2eb3c80128b5c89cc5bc9f42ad42130c17b1c0a53063f726bec41a9a16561d6581364a753b123cba2664a950fef36731f6863af2eecc2ee13
SSDEEP

98304:544npxkGT1V8k+0yF+x4RZNChcrZo1gPkKbLQO1wMgmjcEcSa3LK7:vnT5Tx/yF+x4RNvPb3l1554EcV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35e7442dd1c903860c5958a53cc184da_JaffaCakes118

Files

35e7442dd1c903860c5958a53cc184da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8353f001f2ad8bf90deb3c902fb93ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

winmm

timeGetTime

Sections

CODE
Size: 3.6MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE