cef85ce43ec59b8e1050fcc8c6d574bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cef85ce43ec59b8e1050fcc8c6d574bb_JaffaCakes118
Size

3.8MB
MD5

cef85ce43ec59b8e1050fcc8c6d574bb
SHA1

cc3a1a179f037e38e2113a7a1e48800a8f2270bf
SHA256

e03a994ee4ef7a7a4e337d4e22749c143fd89147abdab67439c1836763f78b3f
SHA512

9615711266909e18c7b58c7ffca1a22c267267f9cef2767e3d26243f9d020523807954358bac6168559b16783ce54b49236d982cf6c3dfafd076fb34d3997bf4
SSDEEP

98304:oVLYi8nLkWRfD5ZcRU8pMjUnpIGKA3GVHd+LUC9FLl9fWxSG6Jzr9:9XTV+ySnKA2VHALUCtldWf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef85ce43ec59b8e1050fcc8c6d574bb_JaffaCakes118

Files

cef85ce43ec59b8e1050fcc8c6d574bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9d32b8ef82b52df87b6590166c50c62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

CODE
Size: 3.8MB - Virtual size: 16.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE