82ec96bc52555015e1475f52ca2b239a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82ec96bc52555015e1475f52ca2b239a_JaffaCakes118
Size

183KB
MD5

82ec96bc52555015e1475f52ca2b239a
SHA1

8b9ea23db9d1975828b8ff4ac3a89a855b6ca169
SHA256

445f92804078121094835835e39a1eda5a451839765ec7d4306a27dfe0f6edf5
SHA512

fb3f1e4b81ecb0441ebc5be7a15f5bd18ec290faee25b5d38885ffbe3d05fc8ed0520190db1bba77273a103fe034558a9d2285be80ba7c7ccf48d9904e7df086
SSDEEP

3072:eZN4sTm/2Oii/ovWPqWa5/1zbNNPKUXB0gy096ftnUcLY/cNqyGh:MNxm/2BePqWaTzbNNiuyu96fB5qyGh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82ec96bc52555015e1475f52ca2b239a_JaffaCakes118

Files

82ec96bc52555015e1475f52ca2b239a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 151KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE