efbc9241cb81213b484dcc2efc3b9204_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efbc9241cb81213b484dcc2efc3b9204_JaffaCakes118
Size

849KB
MD5

efbc9241cb81213b484dcc2efc3b9204
SHA1

086baf6b6c4af9508df0f95b81988fdcbb3c9fdc
SHA256

2c05e906bb0f30034391ccfa581b74fa31497bbeb0af08bafd5378ede4561c4d
SHA512

3b6d6ab232e08b28b747cbf1dd89e6ca9653b84d84c0fb278bc37b9bb1ea4ad45336aa56089f89ae3c61d838bb125e17b9f4799aa6e34b241816ddb546ee5f16
SSDEEP

24576:i4mBogE5TsQwBk7LUgd78PqBK1Dpc6/e5cveRJy7:iEgIdwM8DC6/e5AeDa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efbc9241cb81213b484dcc2efc3b9204_JaffaCakes118

Files

efbc9241cb81213b484dcc2efc3b9204_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7547cd08a992b687c417434c3b5c7770

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 743KB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE