8d5dba39d5a2e0257af76f623e29eba0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d5dba39d5a2e0257af76f623e29eba0_JaffaCakes118
Size

3.1MB
MD5

8d5dba39d5a2e0257af76f623e29eba0
SHA1

7f1a5143ec05c6adea9438fdf10564ee7f92e14f
SHA256

d22322c2f1a4136965633f4b326ffac9891b41b7824ee76a9544e580261e2604
SHA512

d1c311f7b5d59f5f85ad4ced928122396f1a0ceceb901f12a9e6658844d3222d1a0e9752371fcb6ff553b3d2b9f9e2ecde62e334a1bbde8e8c12c3b41684a0e8
SSDEEP

98304:moVIqwhehyp7d1wnl+bmU/RipxCx2v4zZvQ:moif1d+kmUJiKxE2Zv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d5dba39d5a2e0257af76f623e29eba0_JaffaCakes118

Files

8d5dba39d5a2e0257af76f623e29eba0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6ffb9014d502d1650226318aef9871f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 3.0MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE