63e57a53facfe620b1a93115890dd827_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63e57a53facfe620b1a93115890dd827_JaffaCakes118
Size

397KB
MD5

63e57a53facfe620b1a93115890dd827
SHA1

6bf189d474c029d5551ee2bf6840af66c50244a0
SHA256

3787dcd29dc058a97566c3d3e18f0afae864da08ecdc7fec921fdc1297e1bdd7
SHA512

65ab7e67f17dd383c4dd6ad7fb189dcdb4d71ca7f59912b2ad5b643c7dc8d8c6d7ae620981bd19a00b660b04b0874ef52b36cfd8a6186aead2f1bde6854aa11f
SSDEEP

6144:GL02YI4+ibEZeQYfUVgKyvFG8ULzSiAc0SSS917/q0CxjgFoXl8R71m2O5u:G3Y4ibEYBEgPYVL+ibN7/Qx0267tO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63e57a53facfe620b1a93115890dd827_JaffaCakes118

Files

63e57a53facfe620b1a93115890dd827_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 311KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE