a9016255a5a40dd2af94549203a40057_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9016255a5a40dd2af94549203a40057_JaffaCakes118
Size

3.0MB
MD5

a9016255a5a40dd2af94549203a40057
SHA1

5b5e4f44961427b43c61ed37621f8d6b0cad9ee4
SHA256

1fe2c7c1ce44709c2f03d9dea3a7551e2dfb7a992ec421a04532e6038fea62a4
SHA512

b3ff3029e79ed2101b8c6fa0b95587a3ef65c33338861c05c86cd4b79dee6ce8a36f98a49df56c4ce4bebc963847ffc0243d7a9f009170d45502d031fe345bbd
SSDEEP

49152:mBO5TxbrtsaBP+EKLPe/t/35GKDVFau2WN0ZapwSrjSoeGlk98zn:VV9BwPyrDVFaaRrj7Rlk98r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9016255a5a40dd2af94549203a40057_JaffaCakes118

Files

a9016255a5a40dd2af94549203a40057_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6ffb9014d502d1650226318aef9871f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 3.0MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE