bdbda6563163101322f34393dafa30de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdbda6563163101322f34393dafa30de_JaffaCakes118
Size

419KB
MD5

bdbda6563163101322f34393dafa30de
SHA1

9e7a6c3b314e4ee150c7c5d7985e1c2363a6939a
SHA256

7cb7ea14ebc20f71640114de27e4fee1e44570b93e15ef17738a6ed1730107ef
SHA512

d6cbb9d97cea5f3e6c336d8a2617249896af78fbc4832485c7a04e117c8888dfe034ed86aacf2f177972949d67cda975920f9da953964bf9f1293a8b11ef81ca
SSDEEP

6144:bBU68oo4TRiOQodxKiav1VNtzEnX4z0v7bCXcyswWbPlQqha2hvz9fSuexJkesX3:1xoKRHQoDT65EnXfCXcRVTxVz9RexdY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdbda6563163101322f34393dafa30de_JaffaCakes118

Files

bdbda6563163101322f34393dafa30de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35b092c09f101dd3eefafe41fae91889

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

urlmon

CoInternetCreateZoneManager

wininet

FindNextUrlCacheEntryExA

Sections

.text
Size: 410KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE