b3dfcdee07ad9903de65f969d59f00ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3dfcdee07ad9903de65f969d59f00ad_JaffaCakes118
Size

384KB
MD5

b3dfcdee07ad9903de65f969d59f00ad
SHA1

8c4724f5a77c88f3780b0637b80c9e568cf23600
SHA256

a8d2235116c6c84a76c472537834ba0341a28379f3c9b40bcc5ebc92dc91bfe8
SHA512

576bdc0bf6ce691afe670ec39b6ff5b031c94c316b210d21e9925294a0795a6df718f8eef8c4624e974e4fd7b4c583d83957ecccba0ef9de31451bc424bab78a
SSDEEP

6144:qn1YpLVICojHvD6ktzdafPvjEpMBJ3kaIBYWcm3hclTcjqdJQW6kbFpo:gupLVZeHvD6ktgfPvjEpeJ0aUEmxclTv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3dfcdee07ad9903de65f969d59f00ad_JaffaCakes118

Files

b3dfcdee07ad9903de65f969d59f00ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c926ecd9ed3b8bad2f94748e1819992d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

ole32

CoCreateGuid

Sections

CODE
Size: 337KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE