b9e44e08c2e018975329420ee559d008_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9e44e08c2e018975329420ee559d008_JaffaCakes118
Size

267KB
MD5

b9e44e08c2e018975329420ee559d008
SHA1

ab107ccac413ac23d99cfc66e8ef62cb5e1bbd21
SHA256

b3309decb6cf037b54b8378783b71561bb24dd02c0b25716b3df4dbafee46c55
SHA512

b0333aeefbe51d8f5ec5133c3244aaeca88075cd550772a9554da7c669bd24bee02ae94f2ab0b9496e4953099bc6729b0df63034d50b438e375f0ba998bfb05b
SSDEEP

6144:SAnAJZrR9YylCCLvqZj/9zuxOaP+Xdyek6:SAn2T9YyrLvKl+rPslJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9e44e08c2e018975329420ee559d008_JaffaCakes118

Files

b9e44e08c2e018975329420ee559d008_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 181KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE