bb969e1e1ff4dfd8d4e0557c16560254_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb969e1e1ff4dfd8d4e0557c16560254_JaffaCakes118
Size

553KB
MD5

bb969e1e1ff4dfd8d4e0557c16560254
SHA1

bf6904073d44bd002db073731743edd1a49e43bd
SHA256

07e3d1b000a28d51c679732d747c482e858bd2aec7e45d9066c198a7ffcd3015
SHA512

3dd7f75528b15c1004ee2410067a60aacf183de5f66362ea1f0b149cfa337f59c5d9e53f75f575d16d4346b2f20c2bcbd49f2634255923f1f65252c362c4b84e
SSDEEP

12288:kUpko5Kxe9fV+ljVgVXbuSk6UMHSjrnztHsz93flLB/jDNV:6NIojcuf6DSjTw9PlxjD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb969e1e1ff4dfd8d4e0557c16560254_JaffaCakes118

Files

bb969e1e1ff4dfd8d4e0557c16560254_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5944fd5f7cf574ba8cd9ef5a7e0aa49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

iphlpapi

SetIfEntry

Sections

CODE
Size: 264KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE