cf230994623375263171902e61e3739f_JaffaCakes118 | Triage

Sharing

General

Target

cf230994623375263171902e61e3739f_JaffaCakes118
Size

3.3MB
MD5

cf230994623375263171902e61e3739f
SHA1

705876944b08c00260073b54a29bc06480915577
SHA256

6706eadca58de69091fd1ae0fba059b2a424609e53556ec71dac564b8158351c
SHA512

a83b3d981bb9d7afbeced788fca41e04df1802b4c6f57c3187dad74d2a645e9519cabd3cb423c58f3abbcff563e847eabe3651306ae830bc070cc8b93548aa4d
SSDEEP

98304:1wkkT6tZNgqoI3sySlNLxZSKkhiAnuGZUKrOM5x4:1w36bGl0pYLxZSKuiAnUKz5x4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf230994623375263171902e61e3739f_JaffaCakes118

Files

cf230994623375263171902e61e3739f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6ffb9014d502d1650226318aef9871f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 3.3MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE