652b757476dadfd93303237adccef81b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

652b757476dadfd93303237adccef81b_JaffaCakes118
Size

426KB
MD5

652b757476dadfd93303237adccef81b
SHA1

d25ea526cc8abab28db7b840c5cb154a77fac822
SHA256

067be9dc5683d73d47d914a13435e44a9d1b814d9a796f09d1e0636f9f892ee5
SHA512

e75dffc3730b726aaba553ceec647c11e3bb9211d7d9c35176908462b4925f44bc3e9d7d1e1612c690e8f9b44456d07e3f876da6e3008bc37c72108eae233a44
SSDEEP

6144:a0tvBV29qbN/SCjBGkMCN7EJAO7LGyEX9x/BHFPgnY+KnY0LkMWtkJ+jjuc7kbwd:a2pqwsCd7EKO7y7NxDgKnAsYKxQ83O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
652b757476dadfd93303237adccef81b_JaffaCakes118

Files

652b757476dadfd93303237adccef81b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f45899327c851d2e630c0078db201655

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

netapi32

Netbios

Sections

.text
Size: 412KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE