3fccdc1a5fefe244a4c46f24331d540a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fccdc1a5fefe244a4c46f24331d540a_JaffaCakes118
Size

248KB
MD5

3fccdc1a5fefe244a4c46f24331d540a
SHA1

0dd4ab9d880143776181b9072e5fd3db5d433771
SHA256

daa92314d8fe9a4a6982d8bfa4d1933a9d16dba7784be83df30eda7fbc744a40
SHA512

a17fd2cc5892c4e079b354b66dbafa8d84ef89c22a85f21229e28d0696d8243713d8492aec39367df270be9b031c7e9b855e56fbde0dd0285351fc37f465b1f0
SSDEEP

6144:vWeIb0UKsPn7gso2SzAXisbp1Hh1HrFd3wZqz/0J0fFzociu5:lUqsPznrh1FdP0aK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fccdc1a5fefe244a4c46f24331d540a_JaffaCakes118

Files

3fccdc1a5fefe244a4c46f24331d540a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c87d79d4aedd2a5806b4f002839d0321

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHGetSpecialFolderLocation

Sections

CODE
Size: 236KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE