5cede59f8d0399dc7b9c23ca4b65475b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cede59f8d0399dc7b9c23ca4b65475b_JaffaCakes118
Size

1.4MB
MD5

5cede59f8d0399dc7b9c23ca4b65475b
SHA1

62b8094821a6c9219a8835320c5a2f3e8fcd9386
SHA256

af2d9f434afe900ba92c22aac7560a0ef0877187e089b41c5ee64e4d00cb0c6c
SHA512

c374d8aab8674bd3f9c519fa3d48ae1b4cc08d52782733a755467382a4e0246b881cc8026e8fd546aebbf85192ae8a7e054ff62d64bc03739ed60b3cc5009e1c
SSDEEP

24576:dMxGR3FEnFakioybFXIv8vfrHnohykU2nE6iwmeSdkg0AS0bOHP9cqeRt:dMx2IojR1NfrHohHtnEmmeSdBQ0bOvjO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cede59f8d0399dc7b9c23ca4b65475b_JaffaCakes118

Files

5cede59f8d0399dc7b9c23ca4b65475b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7547cd08a992b687c417434c3b5c7770

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 1.4MB - Virtual size: 11.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE