d994b2c30456381828664da257533a42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d994b2c30456381828664da257533a42_JaffaCakes118
Size

222KB
MD5

d994b2c30456381828664da257533a42
SHA1

c75ba957ff99766dfe08464b180ccf8a174ec36e
SHA256

ea29fb07247bebcc46ad7518dcc8bf70b421833eb0b3d08bb44e1fb44fc4ba23
SHA512

3e6ae7ca4310b3eb361927cf371c0a705f03eaf2628fac400af0a62a4c9e700c59afb417806c076ad2997c6f37c074a38069befab965ff8c07e3c8571542061f
SSDEEP

6144:VPXwyQgmhPRtF2B8EpoYPbD+7HjY8iuiDSKLmg10:VPXwyiBRX2VposbWWVSKag10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d994b2c30456381828664da257533a42_JaffaCakes118

Files

d994b2c30456381828664da257533a42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1ca1985fcae11433517cd324375df60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ExtractIconA

wininet

InternetSetOptionA

Sections

CODE
Size: 207KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE