82c5b4275269183de32dd9a2ea415cf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82c5b4275269183de32dd9a2ea415cf7_JaffaCakes118
Size

291KB
MD5

82c5b4275269183de32dd9a2ea415cf7
SHA1

efba8bf81a5b077d2ed1e4f54f6838024a70e0bb
SHA256

d44689d8c633d8b6e6ca7f6ee22ef169c847f09d9892a3a58e0a65ad92de882d
SHA512

203d72208df6bd587f53090f0851e4e8ed8fa5cd0ac1e1d3fcde01e4275eb344fcaa7306802c67721cba9477955d6048d8192e9af2afe541cd48d37fd4d1a6ea
SSDEEP

6144:mvQgfrPF8Qx+XAakbG2fo7TWPElXeTjTls1tm35W7fG:iQgfr9Tx+Xig7C4XeTNsM5W7fG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82c5b4275269183de32dd9a2ea415cf7_JaffaCakes118

Files

82c5b4275269183de32dd9a2ea415cf7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e612b33a788692a773cf18d7f60615b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteExA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

Sections

CODE
Size: 277KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE