ce84008dde756fed800b14ee43cff9d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce84008dde756fed800b14ee43cff9d6_JaffaCakes118
Size

217KB
MD5

ce84008dde756fed800b14ee43cff9d6
SHA1

b42062ad87d601a26d8ea23978b379e40ce119df
SHA256

ab5b1799705f2937a7ea1aaa4299e351c40f68d8c2fa47d2f64bd7e7bdf1709e
SHA512

47ec7bb5fab293fbb1b0e1dd2b081d03a1f60fa88ec78281a0650df8c3e92d87ff6fc2a4fcaf31fd7484caa8d769ce82df710ecae9514cd56bf2c8c05d77ae2c
SSDEEP

3072:wRg5bU/1qQcMPkTO7yhHBeE2PMVU03P1ygerba18T5813+fg1C/Q4SbYTx1wAb3r:Kg56hPEGG/CjT588+C/5Sb6b4zVk5G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce84008dde756fed800b14ee43cff9d6_JaffaCakes118

Files

ce84008dde756fed800b14ee43cff9d6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5f6cb79635d33a4d3b81623219815977

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

mpr

WNetCancelConnectionA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 206KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE