db6c59024470b06fb2f8a1760a20d8b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db6c59024470b06fb2f8a1760a20d8b0_JaffaCakes118
Size

596KB
MD5

db6c59024470b06fb2f8a1760a20d8b0
SHA1

09436271214babb2f458841498596627ce283ec7
SHA256

88bf2bcfad06f5a38846b61e535124b4f5f86883bf1a87db4769e77befc47045
SHA512

c741deb6e997d12cee9d3495f1295790f6a34647eccc958b2ba19213ee12e2e6ddd805c24ab9d539ec50867e75428e0b45672854c2767fbd83ad1753403f817c
SSDEEP

12288:rGiiIssCH+c+Domuiiosdg0uW2y4+oHKskpHpfqOvjgVMz+:yiRssoZmuiX0uWz4+oHpkppvUVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db6c59024470b06fb2f8a1760a20d8b0_JaffaCakes118

Files

db6c59024470b06fb2f8a1760a20d8b0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3b115b26b7771dbaffb61a091263b43a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

CLSIDFromProgID

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

winmm

timeGetTime

Sections

CODE
Size: 584KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE