66b6c44fef1f14993a32f9afc2f6552c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66b6c44fef1f14993a32f9afc2f6552c_JaffaCakes118
Size

435KB
MD5

66b6c44fef1f14993a32f9afc2f6552c
SHA1

645d39b819b3db796d62aa1c009bcaf5a6d169c5
SHA256

b1ef429bb9103d948f96e33c0b8e4f183eae586708ea55cdc3f3a1c3e7a23fd8
SHA512

18d950d263a2cbc641b5a6a23b0efeaf1b5ba7822f91b35e89cc3b12f70aebf9132b28cbbd4c5570115abc06e55ad880f6bf460063292e34cb4f3cb86fa90551
SSDEEP

6144:VISeFU6C7o4VLuysqDNnKr70TdkeMt8BvGGGGGGGGGGbGGGGGGGGGGoGGhGGoGq:VcFU68o8uJqpa70JnipDZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66b6c44fef1f14993a32f9afc2f6552c_JaffaCakes118

Files

66b6c44fef1f14993a32f9afc2f6552c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15ea5e7594f976829e145b9a5ae92b7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

CODE
Size: 138KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE