a3f1e2d132d205c5e75d4d9fa4e62466_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3f1e2d132d205c5e75d4d9fa4e62466_JaffaCakes118
Size

3.2MB
MD5

a3f1e2d132d205c5e75d4d9fa4e62466
SHA1

d8e060a93d998c7b10d06e84c0a0bdd3c3f1ebbd
SHA256

24daa96778a41a7a4bfbf6610b454d313dd64add8cdcb41fb1378a292e395f49
SHA512

5b58ac3af569bcd07194e9820ee4a54bf81d75e6992b794a45ec7f6d0bed22992c1115cd3583ff70945aa2eefcf8cadaaa4194e86f9e0bc092fa9158126a63ea
SSDEEP

98304:rRdNunPWML9VBUwzW03nWSxwbUWXIOwlazLmd1:rRdUZ9VBUqdxwvYOwsmr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3f1e2d132d205c5e75d4d9fa4e62466_JaffaCakes118

Files

a3f1e2d132d205c5e75d4d9fa4e62466_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5955d3d42fdefe15d0735ce6927876c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetGetConnectedState

urlmon

CoInternetCreateZoneManager

comdlg32

GetSaveFileNameA

winmm

timeGetTime

Sections

CODE
Size: 3.2MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE