d5b417730a0dd63339692009497ad575_JaffaCakes118 | Triage

Sharing

General

Target

d5b417730a0dd63339692009497ad575_JaffaCakes118
Size

1.3MB
MD5

d5b417730a0dd63339692009497ad575
SHA1

fedd878ba324f0d332d0648a61756ec752f4fea0
SHA256

744539f53f5f242eb5a026a30630000eb4f5dddc9d2e67e7056839a9c870b4ac
SHA512

c55c8823052c0bee5093398db9e9a78f34161a41c738e566c7d4a4f0db56f8a7afbd90a1222dafad483bbf03cabdcaf05eb80ba3926b77a4a3656f7ce29b5ad5
SSDEEP

24576:okL9Hx+PgIAw8T78cGbZhFYrBWUWuPzrK4DiG/wS8bN9k1yjW/:okLBx+Pgnw8ThgX/u3VeG/tUk1r/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b417730a0dd63339692009497ad575_JaffaCakes118

Files

d5b417730a0dd63339692009497ad575_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7774473c6712330e52e7d1f51c9b75b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

UninitializeFlatSB

shell32

ShellExecuteA

ws2_32

WSACleanup

Sections

CODE
Size: 1.3MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE