4b35d4c8a1536478d5c58dd457fbea9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b35d4c8a1536478d5c58dd457fbea9b_JaffaCakes118
Size

441KB
MD5

4b35d4c8a1536478d5c58dd457fbea9b
SHA1

85e874a981f20b2b2e3cefbe317270b22f2692c1
SHA256

45e68b16b3e5b9d414f08c4cb4e52c146d29aea5d7438bd87673b7391839c862
SHA512

e5b206c9e6c532341542a2034a1a0040199acda4347afe4a421a5f8de9f178efa4d9df83d9bf047d22b64133e2cd2c50e4f7805766ff19e0e6bfacdf8b50ada8
SSDEEP

12288:VqOKLUy3uxrsIXeiXnwhOIFkk9skkkkkkkkkkkkkkkkHkkOXkVik7kkwIkkcNoAh:UL38r9XwhviZ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b35d4c8a1536478d5c58dd457fbea9b_JaffaCakes118

Files

4b35d4c8a1536478d5c58dd457fbea9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

523a6fe2f78d330f3051633b4fcbab86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

LookupAccountNameA

comctl32

InitCommonControls

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

msvcrt

memcpy

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

user32

GetDC

Sections

.text
Size: 34KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 406KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE