93ac5b1d16b3f2d10c513a57502b4e77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93ac5b1d16b3f2d10c513a57502b4e77_JaffaCakes118
Size

217KB
MD5

93ac5b1d16b3f2d10c513a57502b4e77
SHA1

52700c40dc085adb7c08fb9f10154d27139073d4
SHA256

792c9e60ed0d1d107fb25579b7ea24b686b3214631d7ea8a8b5547f8380ef7e5
SHA512

40030b41a14f1383233f659d3eb561f39bbc23d9c17e078598fbb37b2bcce6f63da78ce2240c80df3be55ed1dd22811b50aa92bd8d429424d9972ab4810a143c
SSDEEP

6144:C3Z7eR3Zt2hK3qceRW6awDDg+rct7Dmz8I:uZ7eR3GK6PR9LDg+rmDmz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93ac5b1d16b3f2d10c513a57502b4e77_JaffaCakes118

Files

93ac5b1d16b3f2d10c513a57502b4e77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 205KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE