e21cc06ed99440b3b0c61251bcbfddca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e21cc06ed99440b3b0c61251bcbfddca_JaffaCakes118
Size

2.6MB
MD5

e21cc06ed99440b3b0c61251bcbfddca
SHA1

6e7a598a056ff0cb527024007418e5932f2807b0
SHA256

f12ee01d98e929df2be971c406c62ef13cf25aef81ec038630b0b7b38610465d
SHA512

835331501cab28ad4dfd4c7de0b496b3bcd9ddbda6778420e7035c665a1ef51fb636675eccfc1d69213200df9e801449a69da4356a79b44cbf24760770fc39d7
SSDEEP

49152:9bUk9E10ymD44PCyqwL77W+6lDwxdPVG1Ty2cjxWu/lghbITImw3g6LQXq8zn:94k9E9mD44PzqGWDSdSyRIWghbIExhWb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e21cc06ed99440b3b0c61251bcbfddca_JaffaCakes118

Files

e21cc06ed99440b3b0c61251bcbfddca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6ffb9014d502d1650226318aef9871f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 2.5MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE