a463b06cb2bd53714bbe442dacc2fb00_JaffaCakes118 | Triage

Sharing

General

Target

a463b06cb2bd53714bbe442dacc2fb00_JaffaCakes118
Size

447KB
MD5

a463b06cb2bd53714bbe442dacc2fb00
SHA1

6dfa797f1a909511a621e0213ae643da590ffe6d
SHA256

6a35a44c8bec3104b3d82a00dde1814aa30b6b397098afd8fffda1e1b65b8829
SHA512

526ad91d69e1d632f2393c291cd6e50a0d4ec14fd49992256a171ab509a9cf203113a82de48e4372d6f1289bca14f5d50fdb0263dd3a3e6484b43c581aa0063d
SSDEEP

12288:jNIRa43m6IR/BwtbkmNeDkRdGPAEoRFWeyFQ:KRajHjARdGPA4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a463b06cb2bd53714bbe442dacc2fb00_JaffaCakes118

Files

a463b06cb2bd53714bbe442dacc2fb00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 432KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE