fd5bbe81c3d07e91c7ea61ca2c94cfc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd5bbe81c3d07e91c7ea61ca2c94cfc5_JaffaCakes118
Size

555KB
MD5

fd5bbe81c3d07e91c7ea61ca2c94cfc5
SHA1

69cd46e49aea9a47ebeb4f9e5b06307942656885
SHA256

926e93a7fb1114a9ffeb2905e9f5e8055d3330ea97eef755c38e5f9244353dfb
SHA512

9b536f9e081bb6e78b400842fa992a038454545762ce50df92963300cca341936d701fd663cdf4aae5d37d384625cf77324423fd82793cb718dc013b190727cb
SSDEEP

12288:W6UiwHbcLWp8ak+XzaW3IhO+Vb0B+anJPkh2dHVcEzU/N:W6Uiw7vzShren1l4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd5bbe81c3d07e91c7ea61ca2c94cfc5_JaffaCakes118

Files

fd5bbe81c3d07e91c7ea61ca2c94cfc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bde268270c9cd5c8769f7e3ef7962d93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExA

comctl32

UninitializeFlatSB

comdlg32

GetSaveFileNameA

gdi32

UnrealizeObject

msimg32

GradientFill

ole32

OleUninitialize

oleaut32

SafeArrayPtrOfIndex

shell32

SHGetSpecialFolderLocation

user32

CreateWindowExA

version

VerQueryValueA

Sections

CODE
Size: 539KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE