77277006a976f824152914e3e2cdaa31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77277006a976f824152914e3e2cdaa31_JaffaCakes118
Size

1.0MB
MD5

77277006a976f824152914e3e2cdaa31
SHA1

ae09e31a8a2c16f8e86c197001ff52f4f577ed66
SHA256

b8380c5a1aa1e7ec525b71c51af71a65cdb53541b966c85563b1c45e398e82c2
SHA512

6b05dc39c180eadc90152750d7bcd748e4656f82e30c71d1f58a2c6214e9fe5844d0039c2ba7a318729c89d0bf9e458b2449d5097ca0e193320591b6e4d973fb
SSDEEP

24576:0pm9yfoK6Iz12AwfwQivMqMQFZZLiIFoBihzCLnOUBkAIPT/O8lj:Cm9yARWNlMQDNiIeBoMkL7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77277006a976f824152914e3e2cdaa31_JaffaCakes118

Files

77277006a976f824152914e3e2cdaa31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e13f8d3fc6ea8c0dab111694dc4906b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CoTaskMemFree

comctl32

_TrackMouseEvent

wininet

InternetGetConnectedState

shell32

ShellExecuteExA

Sections

.text
Size: 1.0MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE