8ee95d9a2dd87fb0652d7e8f6e736255_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ee95d9a2dd87fb0652d7e8f6e736255_JaffaCakes118
Size

556KB
MD5

8ee95d9a2dd87fb0652d7e8f6e736255
SHA1

717362640a29b52a544241f53856899f5469c183
SHA256

40c9c07d215b397b366a6dacab37132fa67fa81b0874009c8ee671765e26ba3a
SHA512

097f11eb7dacce1cceac2599df05bef5ee9d68954b9a3800f49436e6566337402b9180df65e30d52c5dee748c18b7efacc52f73f79858873b343d2c7ccf295a0
SSDEEP

12288:Cc4kdcmwHgjsVtBs/8dvxeSDDF17xqIQ5u0ZN2N3PXOYB:Cc4kN1j6tGGeGDP7nQT2lfOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ee95d9a2dd87fb0652d7e8f6e736255_JaffaCakes118

Files

8ee95d9a2dd87fb0652d7e8f6e736255_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5944fd5f7cf574ba8cd9ef5a7e0aa49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

iphlpapi

SetIfEntry

Sections

CODE
Size: 264KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE