ea2430ebf5ffecae66a5a93b76574b8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea2430ebf5ffecae66a5a93b76574b8d_JaffaCakes118
Size

1.0MB
MD5

ea2430ebf5ffecae66a5a93b76574b8d
SHA1

a148d2876b627f6a4403a2fdee5531332d037043
SHA256

476e69a26dece186390c0cfc275cd93ced7ee049353d14e9668e02e540036cd2
SHA512

ba3d0b8445d129a7a9245a011aadbcf383327a408fe0085ef5270b1c50f17df2632e905d64a689edcde1db856e5afb0c8c5eb3425561881b9903f06ce4902a1c
SSDEEP

24576:5In4CDuJu5bQPAmYzAmDay4dT1ar4Rg5iCalId:SvH5bQYmYcHtT1awg5yu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea2430ebf5ffecae66a5a93b76574b8d_JaffaCakes118

Files

ea2430ebf5ffecae66a5a93b76574b8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0918a568949c75f00d4838b62940d730

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHFileOperationA

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

comdlg32

GetOpenFileNameA

Sections

CODE
Size: 1.0MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE