dde587ff4b8090310d612b3aa4b25c4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dde587ff4b8090310d612b3aa4b25c4c_JaffaCakes118
Size

810KB
MD5

dde587ff4b8090310d612b3aa4b25c4c
SHA1

68cfde7988db5007d10b340314c8c600dbf4ba40
SHA256

67a40640e6c944952e2d01546fa5df3497f38c28af79eed2850ab7492d0bf0c7
SHA512

22acb7bd0832931d0daa7924a29f954b573911188963389a1b23d817e80a1b8040e45f0733711be7e87b8b31cdf8702e30fd991a1c73cff65e05397b34a6bb3e
SSDEEP

24576:XwQWeXd42Xcd7vTWT01bBNfWx/jqEXpRvs4DB:Xvbmycd7vTS01n+x/e0VJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dde587ff4b8090310d612b3aa4b25c4c_JaffaCakes118

Files

dde587ff4b8090310d612b3aa4b25c4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b77dad5a499cd625252b2f4a6bf03c52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetGetConnectedState

urlmon

CoInternetCreateZoneManager

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

shlwapi

SHAutoComplete

Sections

CODE
Size: 774KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE