ff47502542437d72390dadacbb60a698_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff47502542437d72390dadacbb60a698_JaffaCakes118
Size

299KB
MD5

ff47502542437d72390dadacbb60a698
SHA1

437abce34008e30c46bb1a13b236dacb977a1e50
SHA256

194dcdb1223e4b7571451b70034e2050df231fdfc9127d591a30c4ec28e13eaa
SHA512

1b7996a410a5bcce9db9dc59c4ec7f24471ea9ff9e5e1756a30957f726af0d7790d3b49cda523f157f5a18cc541e3987cfeedd4cee1a2e2b61b0ea8d50beb1b2
SSDEEP

6144:RYynLNIKzfNbj8tdKastQVuH1NqZpKnpZvOvObV8:RznzfKtd1VuVNOKnDGOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff47502542437d72390dadacbb60a698_JaffaCakes118

Files

ff47502542437d72390dadacbb60a698_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97518c8e6a44bf4c63ffdfa976e30239

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

wininet

InternetReadFile

urlmon

UrlMkSetSessionOption

netapi32

Netbios

winmm

timeGetTime

wsock32

__WSAFDIsSet

Sections

CODE
Size: 288KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE