8ddc46178e943a42dc63448a2b96ca0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ddc46178e943a42dc63448a2b96ca0c_JaffaCakes118
Size

1.4MB
MD5

8ddc46178e943a42dc63448a2b96ca0c
SHA1

931c99c54b606841244efabe295db217bb305a30
SHA256

2fe0390d208216ca591798359b39eb47aa29526f5a88d205613753383ccbf93e
SHA512

fcc3672988d2efb53c5562672973339d16143522e5d4af5ae11653fae3f9fb5f94fe866a3c7b088cb514528022e78a2353c172910feaecd006b350c1067ddec5
SSDEEP

24576:NaMsq+kWbY0lN6VYVcKnrN86e2dmq/F+Uf4MKfv/JAlhjb8gT69rbZiw:NaFxKY6K/nJdma54RvBAlhsgT6fi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ddc46178e943a42dc63448a2b96ca0c_JaffaCakes118

Files

8ddc46178e943a42dc63448a2b96ca0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

530833577b0dd943540d06d6e801c13c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

FindNextUrlCacheEntryA

Sections

CODE
Size: 1.3MB - Virtual size: 17.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE