bfdee2d3e6f6601412ff17264f471fcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfdee2d3e6f6601412ff17264f471fcb_JaffaCakes118
Size

219KB
MD5

bfdee2d3e6f6601412ff17264f471fcb
SHA1

bc4cdb038c9db6225d9e10b9ec51990421ce833b
SHA256

26ef0bd679f53375b3ac1b3b0af8619447150965e38ad025b4460e2d62184c12
SHA512

6bd4a39e166f99950492a9afdb1aaa27afd99d7a27a02f127a507ecfd1e1daf3283a19f0f92b3fecebb8f7080798b05ba2c621e366e4cb0cc2767cea57b4c13c
SSDEEP

6144:rZ+7WoJvnSZ+gSvf3lwQ95PSfqwBwr01pmonALZeUSRV:YCIvS2f3dc9wukotR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfdee2d3e6f6601412ff17264f471fcb_JaffaCakes118

Files

bfdee2d3e6f6601412ff17264f471fcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de9407fe7c5ce77f2030109dfaf7bfb7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

OleUninitialize

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 185KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE