dd33e003f1b9ed7126fe579fcf574717_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd33e003f1b9ed7126fe579fcf574717_JaffaCakes118
Size

256KB
MD5

dd33e003f1b9ed7126fe579fcf574717
SHA1

2afcbded9fdc320423d8f09653b11cbd80a22ce7
SHA256

b5b08dcdb99d1a9ebbc8d2684f9f4ea8c28ba9064d5c79e26a0f33dcd89971ac
SHA512

f06db0572a5cb9ca2e81ca000542b2a164839fa2d9a03fb957d047ddb1c3a4e435cd1e91dcecf2e66318fc61a16144b93e0f4b3205c69c594ace2d5f31d86a0d
SSDEEP

6144:TRc0Fv6bnpvW4LaFZldJtJTeJmxZBB0+JDUqrXnQnr:TRDUrLapdJt33T0+JDfznG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd33e003f1b9ed7126fe579fcf574717_JaffaCakes118

Files

dd33e003f1b9ed7126fe579fcf574717_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 222KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE