ffdc6be2849c2da3ebb6a4615fd861a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffdc6be2849c2da3ebb6a4615fd861a6_JaffaCakes118
Size

173KB
MD5

ffdc6be2849c2da3ebb6a4615fd861a6
SHA1

0d55311783545cf5145df656238a01e6459d6549
SHA256

d8a10bdae4d994bf3453fc76010bfd36fcca7296cb1b306d1419756dff613375
SHA512

c00557bbeb2cec76bf6db9250ec368f2f478b3a5f040a314c565ae6cc84aa9d7076b26a7d59fb62b7a8225195850dbc42721c0bb43ed382b97097f7301ec68ff
SSDEEP

3072:qCxyOxtw9gRxBUj1mzlihUeMiZhfhd1o2zolc/yztR1n6J9py/Pu43:qCxXwORxURMY1hZMluABsk22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffdc6be2849c2da3ebb6a4615fd861a6_JaffaCakes118

Files

ffdc6be2849c2da3ebb6a4615fd861a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 164KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE