614d893bcd9435094157c858ff097b50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

614d893bcd9435094157c858ff097b50_JaffaCakes118
Size

3.4MB
MD5

614d893bcd9435094157c858ff097b50
SHA1

8f753a5a2c524f2fd81ab6347ddf3ec5d9d01218
SHA256

972d9b3799ec88257a7572e0c6f7b69c6cebcbe058dd95122cd036d29c640dbe
SHA512

82b131d06ee5e6c769e81fd0f8c8ade9ae979944f16718634efd34832eb298802cdac6e86445b85569afb643b02f05b43b6f2e3a17a238a51a84f4af6743c0e1
SSDEEP

98304:/3LEvNKwf1/hocYEx3liQ0n7693iKo+enxesV4IajgVW69QxEt2:YvNKwf1/WcNHT0nsiKlIgsVW+WA1I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
614d893bcd9435094157c858ff097b50_JaffaCakes118

Files

614d893bcd9435094157c858ff097b50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 3.3MB - Virtual size: 10.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE