8e2bf641816e0676f66229c53d30861a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e2bf641816e0676f66229c53d30861a_JaffaCakes118
Size

898KB
MD5

8e2bf641816e0676f66229c53d30861a
SHA1

eb7037a0ad6452637c08bf11809ef2aeb9d0064a
SHA256

b6400307125fe41b5f4a2a03fbeff0730d38499a48a093ce3aca628298c55d83
SHA512

1f0414393f8c6e487ce0392a5ddc24343b059e9ce84011b71bb8605a32047b4ca6bd6d18df9c4f2d1ccea4de63714c2a919dd763531f6b0655f06673bd0ef1f9
SSDEEP

24576:t7P/7QZIXy43TmuOuK7SGBf3Nv7xr2lIlCvjBhU2gT:5/7QC3CucPbDJOICvjURT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e2bf641816e0676f66229c53d30861a_JaffaCakes118

Files

8e2bf641816e0676f66229c53d30861a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ca934427a38bb95cc61b163ad2fe856f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

GetKeyboardType

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

OleUninitialize

comctl32

InitializeFlatSB

Sections

.text
Size: 888KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE