688954552a24c888c32d9c80ec3dbfe1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

688954552a24c888c32d9c80ec3dbfe1_JaffaCakes118
Size

3.3MB
MD5

688954552a24c888c32d9c80ec3dbfe1
SHA1

cc13fc1d3f4509372aa16201b961a4b2680e514a
SHA256

090cfb484abe31d2e32a7d0404d4cb74e371529c8dc8513e7c46f1d5483fa647
SHA512

a541630c129fcb044f6ba5c872490dd0e60bc1c019173e18bb90dc6f18dcf559220bc24e991c2f231e381dd1c1fc4e93b4d04a0d8109b78a0eeebd2635e1528a
SSDEEP

98304:bLJB3Gi0+OsVlcUQc/+pLayzCw6Mi+k9b:b9B31tJ9mpLaJwCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
688954552a24c888c32d9c80ec3dbfe1_JaffaCakes118

Files

688954552a24c888c32d9c80ec3dbfe1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 3.3MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE