78f0e6f51403d328f18f3fd7100ed45f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78f0e6f51403d328f18f3fd7100ed45f_JaffaCakes118
Size

2.1MB
MD5

78f0e6f51403d328f18f3fd7100ed45f
SHA1

bbed6dbbf003fb80583ab23620af5cdd6260429b
SHA256

594462fd57b288eda5d30bbd13a916ce894de7d60d9801b2f0872031e78529f2
SHA512

1c584b68c94b57e982fa80c9acc4f09cba493b981eabad5ea347299daca40123fbecd031799a1f5b6afd12dd91b550d767577a2df9e327ddd100b43260eda0aa
SSDEEP

49152:Ba1hpY32vSKzWrbUOll0LFAFEmrqr0VkvcOHwDdBtC:Ba13Ym6KzWkulmFoMQkVHwDdBtC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78f0e6f51403d328f18f3fd7100ed45f_JaffaCakes118

Files

78f0e6f51403d328f18f3fd7100ed45f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd9738b5e2fab5603c21ede819bc6631

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHFileOperationA

comdlg32

GetOpenFileNameA

Sections

CODE
Size: 2.1MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE