3b51c23e831821a8e8839a99ee057544_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b51c23e831821a8e8839a99ee057544_JaffaCakes118
Size

172KB
MD5

3b51c23e831821a8e8839a99ee057544
SHA1

0718f3eacd353cadd380e67cd158447bec6db32d
SHA256

fd101406d406d357a98efb6b245bc3f8854d5199ac6daa6f8e073d5dee9c51cf
SHA512

cf6e10fc474bb4622c40dbad80f69fb401178e44676ba965490a64ecce573a71577f44c1642e4d344ba0e669ec4d5074067572d4a362a530411783e29766e625
SSDEEP

3072:ScewwYaFeEhvNjE3b0YVev5GtheAA4nRuoLuYhb6vwzT:LewaFxhC3b0YVLtjcu6OT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b51c23e831821a8e8839a99ee057544_JaffaCakes118

Files

3b51c23e831821a8e8839a99ee057544_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6ac841245f67304e0134119ab027bc0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 162KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE