c090b91d1fc7a6f538c48f60823064c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c090b91d1fc7a6f538c48f60823064c4_JaffaCakes118
Size

259KB
MD5

c090b91d1fc7a6f538c48f60823064c4
SHA1

78bc8f44711cb18d8d30a9653d2729e7c9c76b43
SHA256

fd635b593b5e448d91a2d34086df1ef5d23bef15cbac571a4f6f5ca38b3f8ccf
SHA512

b72c02c0994ed7e36f23b5fa88c9b78129d8045d203005361cc61841936ad71c5b04e4831ca97702e55bf7ca9b62fde9ba550322984ddb6984010f30238a2764
SSDEEP

6144:q+t2euKzIegIP+fYkbnYRYruUPf0cj4HMK4:q+t2OzIeeZMYruUPDuR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c090b91d1fc7a6f538c48f60823064c4_JaffaCakes118

Files

c090b91d1fc7a6f538c48f60823064c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c180248fc318fa853e9ec29d00eeaa62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

OleUninitialize

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

HlinkNavigateString

Sections

CODE
Size: 226KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE