707a327e6f96a298f4703f3a5c921ca5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

707a327e6f96a298f4703f3a5c921ca5_JaffaCakes118
Size

1.7MB
MD5

707a327e6f96a298f4703f3a5c921ca5
SHA1

1404e5077cc8e3022ffcd03c8ab38ea0ed27ca08
SHA256

6257e5d600c026c40f7e95b7dd9b6279becdfecfd57bab743fd45fb658f30d1b
SHA512

8283ed27df3fde53ed062867cacdcfe32a42d01dc34772262137f5c32dc263b5a9cb54d5e76ec1d8e13ead8ab159b21ae4df735759a242f31f88579f0cc9e640
SSDEEP

24576:oL5Jm9fJ3Adi0OUcmOGJRB4q6S/dj9Gci36Cf1i3jObViEsYdEiYVW85ei8:omtJwd4UcmO0Aq62j3Ns1i36p9K75eX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
707a327e6f96a298f4703f3a5c921ca5_JaffaCakes118

Files

707a327e6f96a298f4703f3a5c921ca5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7f4c3f86ce8264dcb954feb270a8345

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

shell32

SHGetSpecialFolderLocation

wsock32

WSACleanup

Sections

CODE
Size: 1.6MB - Virtual size: 22.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE