76ca0eaa37d5debbc0178f7b6d9d8a21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76ca0eaa37d5debbc0178f7b6d9d8a21_JaffaCakes118
Size

1.1MB
MD5

76ca0eaa37d5debbc0178f7b6d9d8a21
SHA1

e19bfb7852a537ef00d41118ecc0ab471d8b76da
SHA256

6c6dbf8b82c33f2ab62930d1493b3972d121e071dba893f288b2d8df29dd2beb
SHA512

088144840d15fe20226ee747a0ea82874d6106e7158f99d01f2b25b549486caa658d780e9f24169972b0d77fadbb5a48c2b53a161801901f9a3720410f2897eb
SSDEEP

24576:FRtxUJb5AZV54Yp3xMfsrDbNgi880zPqrK1l5k:FzxU98VqA3CfwVyz/1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76ca0eaa37d5debbc0178f7b6d9d8a21_JaffaCakes118

Files

76ca0eaa37d5debbc0178f7b6d9d8a21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 1.1MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE