8552b6752cc90125b35bf5eab1c79569_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8552b6752cc90125b35bf5eab1c79569_JaffaCakes118
Size

108KB
MD5

8552b6752cc90125b35bf5eab1c79569
SHA1

e54d728a115cefc7180a1dec91b37230ea45814a
SHA256

f33248191954d8c28d93105dfd27d776419e124c9e6da86cd9938db64f0f50c9
SHA512

7630372c22aae5c304042e016c29d19040f070d9bfc504515324f0bf6451a8e75ba737a86fdc71e6770eb76d21dd0b131875c1233593ddd8b31162f0e5026724
SSDEEP

3072:97jmDQ90ny4SPwFh03OcxKB1jRBuU2nReY+:Bp0ny4hTcx8r12d+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8552b6752cc90125b35bf5eab1c79569_JaffaCakes118

Files

8552b6752cc90125b35bf5eab1c79569_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66a66567f591f3e7dbb4dea41b2e889f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

comctl32

InitCommonControlsEx

user32

FindWindowA

gdi32

CreateCompatibleBitmap

advapi32

RegCloseKey

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

Sections

.text
Size: 59KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE