4e1584f489dc82b70baf702a028748cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e1584f489dc82b70baf702a028748cf_JaffaCakes118
Size

527KB
MD5

4e1584f489dc82b70baf702a028748cf
SHA1

4d53618021ebb8508234621078de2716ada2e639
SHA256

e36b4d21ed7cf07804bbb1e629eb1991ca9f43986589367e9c6f22cf74ba10c3
SHA512

adff697b765cd739ed1bce251355e798b14b7a3fc27e3bbad83be612d404f9a18450f94421b699b3558d08233c7102a8f2aa2bf6dc521d429a924acb0c8a44f2
SSDEEP

12288:wAY9vSVmKOtAYJ02VSdiiXkWVLQrrWxfLbPkT/pwnGbomu45vHi:wAUvS5OnjiXkgQXWxfLb8VwnDmu4Fi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e1584f489dc82b70baf702a028748cf_JaffaCakes118

Files

4e1584f489dc82b70baf702a028748cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8353f001f2ad8bf90deb3c902fb93ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

winmm

timeGetTime

Sections

CODE
Size: 513KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LDR
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE