67adef53ed3652afc08dc0806a06666f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67adef53ed3652afc08dc0806a06666f_JaffaCakes118
Size

271KB
MD5

67adef53ed3652afc08dc0806a06666f
SHA1

2942072d61be527980cdd01e3b46b5279ee15f79
SHA256

547db847daa644dcbf7a343d86d97bb5724d46dad59c98f774004b1cc6ff6e9e
SHA512

5886e5217fb7f93c3353afe47b23c772f44042802a3536c08f4b3a1f6b47a1d606c2b4e1e0a1b147ebb746b10539df0fbcbc5ad2e368fcf2c91d11499ba73310
SSDEEP

6144:1Y8GCd1mStzEd4VK8hSAVyI1olftyTNrJ:18i1mGEuSA/EyTNr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67adef53ed3652afc08dc0806a06666f_JaffaCakes118

Files

67adef53ed3652afc08dc0806a06666f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5064f99dba54900478f2eefda0c31525

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

FindNextUrlCacheEntryA

Sections

CODE
Size: 184KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE