d07d7b587fab3f11b94b31c1426b8ead_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d07d7b587fab3f11b94b31c1426b8ead_JaffaCakes118
Size

227KB
MD5

d07d7b587fab3f11b94b31c1426b8ead
SHA1

8a056fc7214a6ecf4821b5e2ffae0ca4e26cf1dd
SHA256

48ed44dda805d8a457ed3c0af66fd9f8c13945be990a6b1faa7ddc4635b24b1b
SHA512

acff5c1073b82d454a5c47ba25657d75e36e064c0d4ff00a4248cb14012fe05ab41bcf969804fe73b3606f57bcfc121f4bb4d9f9ccf7a3f27a9a2b6857bd59f3
SSDEEP

6144:PpzA0JrdcP610tVjnKZGseFaQy7YrbMj0k1KYCg4FADLakq:PpTrdcP60tlKwDLyEXMYlTgqAfE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d07d7b587fab3f11b94b31c1426b8ead_JaffaCakes118

Files

d07d7b587fab3f11b94b31c1426b8ead_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83e3e33408ee40c93ebfeb31cfefe8c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

jxhook

UnMap

Sections

CODE
Size: 217KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE