be2bc8623154c87e18aed231766b7591_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be2bc8623154c87e18aed231766b7591_JaffaCakes118
Size

200KB
MD5

be2bc8623154c87e18aed231766b7591
SHA1

43e7e8a691d848d3a80ade3b7065813f1297f40d
SHA256

c19df6bc3159c33ca4cfdd1e9bbad66000784f471d2d61c0a3f7cea059ec8942
SHA512

97f48aca7e7edd815a9748d0851513fb73bad82b689bcdc4e06480bc1f13747c33af43d44a64938951ac2ad092c37b7be43c78ef8419324dfee23c30c489fa4a
SSDEEP

6144:zmFzBIHX7r1gblk6REiiLe2YYggP4rFSlP:6Fsr8y6FN2YfZSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be2bc8623154c87e18aed231766b7591_JaffaCakes118

Files

be2bc8623154c87e18aed231766b7591_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a56c454d0c6e31a02c05e10f152af395

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

shell32

ShellExecuteExA

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

netapi32

Netbios

Sections

CODE
Size: 190KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE