be34ef41ceb5206f1be7d4283c98f9ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be34ef41ceb5206f1be7d4283c98f9ef_JaffaCakes118
Size

623KB
MD5

be34ef41ceb5206f1be7d4283c98f9ef
SHA1

27919dc58e087f342133af16b08b988a8129d07d
SHA256

198956d11724521504561c58ba764c5f22429234483c5a530610eec0e5817dd0
SHA512

807e5bc107b8ee3bdaf147e8b0ba758c12738eba9af9674bdc9936e1aa462d0c4e789ab186955ccc77569cfceabbbdd122450424228908fc0406f7e880271bda
SSDEEP

12288:u94kTIVC/PIKckjA35rza9/Y0/x8V3YAUiMq9ZNCp05ReH7G55l:u9ZxPIgjAtaxY08VIAUHFgeH7GR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be34ef41ceb5206f1be7d4283c98f9ef_JaffaCakes118

Files

be34ef41ceb5206f1be7d4283c98f9ef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8a6ae5c628d276fe0eacb7aa138c20ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

LoadStringW

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

CreateStreamOnHGlobal

comctl32

InitializeFlatSB

urlmon

CoInternetCreateZoneManager

wininet

InternetGetConnectedState

shell32

ShellExecuteW

comdlg32

GetSaveFileNameW

winspool.drv

OpenPrinterW

crypt32

CertOpenSystemStoreW

wsock32

WSACleanup

shdocvw

DoOrganizeFavDlg

Sections

.text
Size: 390KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE