9589599dfed4526c56924fb58d390d90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9589599dfed4526c56924fb58d390d90_JaffaCakes118
Size

189KB
MD5

9589599dfed4526c56924fb58d390d90
SHA1

0d425b0c0b5cdde9f64777af5ad01d749b864a3a
SHA256

12e2c3cfa5f9d0b3a2899faca1ba8b5598f6e7dfe2b0941297ae350c8bfd6881
SHA512

4a7cbeb8c9c1e4e1c94bc2ab41a9f1f9e4a612ab7e8d4fd73931b196471c8525d394202629d9c9f500f169981b64793671293fcc0df0b95a3ce652e639d5df59
SSDEEP

3072:awroa7u3kyF6K5wLbHwlCGE5kFHCC6CpRJmgItj1zUltHZu0UXGpmrlQgapaw:aGTOYK5O6MMC1H6HZu0UL4Aw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9589599dfed4526c56924fb58d390d90_JaffaCakes118

Files

9589599dfed4526c56924fb58d390d90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 181KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE