5c073dbb8d0380013d0759668a519496_JaffaCakes118 | Triage

Sharing

General

Target

5c073dbb8d0380013d0759668a519496_JaffaCakes118
Size

237KB
MD5

5c073dbb8d0380013d0759668a519496
SHA1

d53f08d26e8e54731083615dd754679e60c3eea6
SHA256

125877a4ecf53e24530d91485f106c56f26a32f8ae30d0cd4e156d674c879bc7
SHA512

4d01bb7050037fd3da079f02e8ad48a670cfed6e1fb82e06e0b8dcee11a343d4843efe5c835696827c84cfb949db8cb4a4a487967d14dc1eb6b67b1bb44c3b8f
SSDEEP

6144:8hFZDHWKVkY3I3ZoOm+yqoVYpy5aHxItN3NJT2sL:8nhWKW+OmxxVQz2/NJSw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c073dbb8d0380013d0759668a519496_JaffaCakes118

Files

5c073dbb8d0380013d0759668a519496_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0def76901b21ce2a664b9b5a04902feb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 227KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE