697ce78c4e29ef030dee9b2379d26432_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

697ce78c4e29ef030dee9b2379d26432_JaffaCakes118
Size

283KB
MD5

697ce78c4e29ef030dee9b2379d26432
SHA1

3707fef92ed9d02416125f3226e866bec64aa163
SHA256

324d5df7d9e1110949f1cf92bd3df48f417076e1de6659f9c0edeb450960243d
SHA512

451850278fd0ec7277cb355e859b81e08c4bc8945b1c6f06945afb47707c538c12fbe58c64a4416978ebbc9ceb44ffc9007de69d25e594e9cbd89c31b60c7253
SSDEEP

6144:cjN5hwmLrW2XL9fAZh7fx4aREGAxL7Hjuyt8SKJiuIHu4:2OmfWYL947yv5K/SKJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
697ce78c4e29ef030dee9b2379d26432_JaffaCakes118

Files

697ce78c4e29ef030dee9b2379d26432_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 265KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE