b5b66217a480e72bb887e49e78d376a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5b66217a480e72bb887e49e78d376a4_JaffaCakes118
Size

255KB
MD5

b5b66217a480e72bb887e49e78d376a4
SHA1

770a7e8161b9b5e12dd26f670a59f0a9605e6d4f
SHA256

4d85890e0f7faa24e55bbacb6cce64b3f33c4467d4deaf953673b8bcf80fa14a
SHA512

e5a38c4b4c055c802effd34ec23e0f8d6a064a4572f4b2c569079802b04f4736c7647e634a8b5cf776fab0408c0fe54199757b1b3b8f749f248520455cbf78aa
SSDEEP

6144:9e7OOgvljU0AsJo82XBVw5cNTvnVxMioAO+dV0VsmtVbI:9e7OxljamgRVEcNrLJowH2sMbI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5b66217a480e72bb887e49e78d376a4_JaffaCakes118

Files

b5b66217a480e72bb887e49e78d376a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 241KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE