8b2f22daee4aa29b9eb9a931b7655c48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b2f22daee4aa29b9eb9a931b7655c48_JaffaCakes118
Size

183KB
MD5

8b2f22daee4aa29b9eb9a931b7655c48
SHA1

e1e1d5c1a83abc935b36a8ee9b7f7a7ff03aa7ee
SHA256

52949f53079ae07c4c47bbaf861f686e0fb79c292c1bd87d431a9e54e7d9e0cc
SHA512

80884796f637b88f451baa446cdf50cf4e7ab92b150cff23dc1e45bd84722eebd6690720950942a334f8a3600dbc5c1c46f0d20caeaa3ac4bcad24b54d79959e
SSDEEP

3072:72OdH3cTkp3sjtFe8pqAjw3mLoi4k5blXPw637ig/gh6xml/Pj344du5zX9JB3:YTQSJpbTAkdm632UgkK34sgzNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b2f22daee4aa29b9eb9a931b7655c48_JaffaCakes118

Files

8b2f22daee4aa29b9eb9a931b7655c48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e59c23898b137b95c974d399bbc54dc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 165KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE