3dbb8bcaf696ea91ec6bebe79ec671ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dbb8bcaf696ea91ec6bebe79ec671ed_JaffaCakes118
Size

564KB
MD5

3dbb8bcaf696ea91ec6bebe79ec671ed
SHA1

6b24a2a3b3ac451de2416b88525e392afc3f452a
SHA256

687bdd6e933f9c3ce9e2c3beada6e3f9be31e01374ff7ce59f76bd6aeb7dc49b
SHA512

4d62e07796213c2850046f372653128b57eb6899851927a2edd430a0368473cdd5f23008a0fe9af31eb4048f05029f3ed5e321780628ff251d3e10e31adb3c33
SSDEEP

12288:goxpIQiBjAyRZVAqopnsoat8DcfUPlah7XnseC6AJexdj:txpIFBjRZVAqoVGthUdG7XsP6zxdj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dbb8bcaf696ea91ec6bebe79ec671ed_JaffaCakes118

Files

3dbb8bcaf696ea91ec6bebe79ec671ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f68c6cc0b146dd9b3164bf988ef61b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

winmm

timeGetTime

Sections

CODE
Size: 551KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE