4a235d0d01b1fc4e0df23860800e204d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a235d0d01b1fc4e0df23860800e204d_JaffaCakes118
Size

2.2MB
MD5

4a235d0d01b1fc4e0df23860800e204d
SHA1

2e47342573685d4a2045477e14f16b5f4aa3e848
SHA256

6758e3823cabd43a9f8ce50cfd25b2d479ea434781fd874b6c775253a2bc9162
SHA512

2352f86e417f72160a2207282b7480fe2167c852d06f0c64bd7f6eb33f8f96c545ef9a0b3a8a440a395fa109e1340afb1327b511b448b48dd1a90dfad45fc307
SSDEEP

49152:bcYI90EeJYaBLFl1yVmOqyYR5trIN0HGRoVza1sOaqbM98kkDw:MqEeJYEFlZS65trIKGRoI1sOaqbMakks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a235d0d01b1fc4e0df23860800e204d_JaffaCakes118

Files

4a235d0d01b1fc4e0df23860800e204d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb8779150388b4b8626d4ff363211b20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 2.2MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE