4d25271dd74eaf00027b39f57a7fc5ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d25271dd74eaf00027b39f57a7fc5ae_JaffaCakes118
Size

152KB
MD5

4d25271dd74eaf00027b39f57a7fc5ae
SHA1

aedb017b2c90d670aea7b86961d66755e363a8c2
SHA256

e473e1188bf2600c321e7c179a64238520bf9d80d5a27b2139ccaaf8a7893e95
SHA512

1b31a2aaf81d7d6d2ec8ff5b1d84eaa4881c30770ef1512e28a297bec6fad7484d1585fd4b2c889588e78c718a08e426b7dc65686bc3c1f0bd280aabcafb6d0a
SSDEEP

3072:ra/9V3szxvP/Z5Qc2TLR+XMusPXvFwZKmRKmaqYG2XwKGihK9pSXUS9gMDqBbguA:ra/XMPh592HcJsvvGwmwdGik9+hegqKR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d25271dd74eaf00027b39f57a7fc5ae_JaffaCakes118

Files

4d25271dd74eaf00027b39f57a7fc5ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7652ffa60974da39227e039bb4c38372

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

HlinkNavigateString

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 143KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE