3787e1db6a0da1c816363636ea75864c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3787e1db6a0da1c816363636ea75864c_JaffaCakes118
Size

182KB
MD5

3787e1db6a0da1c816363636ea75864c
SHA1

c8c301acc6e672e6dc8ccdae46da2ac955f4d0d4
SHA256

8dd00d825b1b2573bb33d80bb87b36ed836e166f5cb2ddf767e6f0e8fedabcfd
SHA512

e1f997f51eee9771d7b227d31cec66b9d537aa697a16d0b695ef7f7f1d86ed93cde46f0351415db242f82a69303c303ab796ac216d994146db283789db2a5dfe
SSDEEP

3072:9pTYadPt6mA+UXXxDksCwgX6+rznVVRxytqDbLKCeegbo9Fb82zl873:9a+VriDksadxyYGo9FbnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3787e1db6a0da1c816363636ea75864c_JaffaCakes118

Files

3787e1db6a0da1c816363636ea75864c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7547cd08a992b687c417434c3b5c7770

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 172KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE