d701c35f1f7671f7f43f1b989fc6f59a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d701c35f1f7671f7f43f1b989fc6f59a_JaffaCakes118
Size

307KB
MD5

d701c35f1f7671f7f43f1b989fc6f59a
SHA1

b06a603b7ebf18ffededd2e74a81c0bc38d9b333
SHA256

e8e119b39b5c30bc3d810003b8a4e4b1103d784c5a93907e2d4464303ad8ae2a
SHA512

075127f830b48087445b7ae7b22a745e97402d51307dc094eed35e1faae92ae73efd50f34b50f4c36dc0f2801ba21cc18fbc26af05989a73a3d9e55a8879b8b6
SSDEEP

6144:6W1qU8Pn9T57iXYa80D3MvRhSL/S4A8PgU1Pt5oWCMd:L1qUgnFNioa80DcvR8zRA4CM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d701c35f1f7671f7f43f1b989fc6f59a_JaffaCakes118

Files

d701c35f1f7671f7f43f1b989fc6f59a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3eb07b4a9b121cf3b179088258982887

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winmm

timeGetTime

Sections

CODE
Size: 294KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE