ad036ec4b6f746e21bc0f8f2c3e8d7ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad036ec4b6f746e21bc0f8f2c3e8d7ff_JaffaCakes118
Size

513KB
MD5

ad036ec4b6f746e21bc0f8f2c3e8d7ff
SHA1

7460d889e5f3ed6db5a68b632d795a7fbcbd665b
SHA256

4b7a79cef3cb8e3c5a6422e510ee0e5f0fa8fcb6441d155cc51871673efd2216
SHA512

43adfe58eaaa1c863081e561074cb9371474c8ebe3131f9d7185b026d6f03377a295ae1fcfadc26f186c91f0d30d2fd393fd4ffd5ab79e7aa1f3120f5a446369
SSDEEP

12288:6PL6LM3xkyBiGgL1h0wIYN43I7WR+omV7XUhM3wnB1V1SfpfZJG:6jiM3x5Iz1h0wIi4lwh9XZgB1fSZZ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad036ec4b6f746e21bc0f8f2c3e8d7ff_JaffaCakes118

Files

ad036ec4b6f746e21bc0f8f2c3e8d7ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3eb07b4a9b121cf3b179088258982887

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winmm

timeGetTime

Sections

CODE
Size: 503KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE