0885d7283ae9a5a2204db11a63c55468_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0885d7283ae9a5a2204db11a63c55468_JaffaCakes118
Size

1.5MB
MD5

0885d7283ae9a5a2204db11a63c55468
SHA1

90779e5b6ef29cb058ebb6eda0aa79a599d62bdb
SHA256

021144b24099c7c1c4efb728c96f9fdf85cfb5183fa1d442edf9e8889b13a630
SHA512

d8b0a8ba8aa00a5e174a3c1240e89e93193e608d5ef81d8cdfa01f83bca9f9da6c9fb55cd1cda2337ab2c49ce218b3447bce4225c5b6fbcc4cc0573f36804544
SSDEEP

49152:iZG6zzIIKy/fUMlbLsyf6jzbseCNBJ9gzmOg:iZG6zMe9Ls+0ONBJ9gzpg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0885d7283ae9a5a2204db11a63c55468_JaffaCakes118

Files

0885d7283ae9a5a2204db11a63c55468_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbea47c0cd6af6c443ef1ef9e0fd8223

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

CODE
Size: 1.5MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE