3d3dfd9a701b8eff7230c40671d5bf0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d3dfd9a701b8eff7230c40671d5bf0c_JaffaCakes118
Size

222KB
MD5

3d3dfd9a701b8eff7230c40671d5bf0c
SHA1

7dd121a00cfef87e16fa85b759602102a4badcb5
SHA256

057eb478a537568f4b195bf345651b9f039b5de039bdd619f87b3b015a79783c
SHA512

1665ab5d348c34d6845e4a257e753294fc05d7b5b0e71f4bf284b55c8df72ed56be41927d3fedb462334e079bf3aca974b2d550338de7b0a060bc9bf1ed3c9a4
SSDEEP

6144:2QuuDQ0eNKGG+m3h2pndgcvZkz47twP8PP5I6Snk+5qC9GSV:MXcl3hQn9ZkzYpGBk+5qCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d3dfd9a701b8eff7230c40671d5bf0c_JaffaCakes118

Files

3d3dfd9a701b8eff7230c40671d5bf0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19c0968ab309786bc667e7c2171d1b37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 210KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE