1621d7c0e84fa8e4df5b325bdde916df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1621d7c0e84fa8e4df5b325bdde916df_JaffaCakes118
Size

162KB
MD5

1621d7c0e84fa8e4df5b325bdde916df
SHA1

f21b0ba49c59f549c3a9c1a36e59e48e33809388
SHA256

f2064ba06177a050d44562a7b67a1a16f064c28a04aa2773db202251df1d9b77
SHA512

03530ca37457c6e8397fe3eb2b34796283f23d2280efcf4e140ae5626be4a20de112ef3fff1326476b906f192d4ff535252443b6ca9868dcf82253ff03def61a
SSDEEP

3072:MZnTmBF/sEEPY8kZeAB/AVJo7Uia5RTmD9cimxYsMArrZtqwDps:ATmBVyPse6sJo7iRSoiAvqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1621d7c0e84fa8e4df5b325bdde916df_JaffaCakes118

Files

1621d7c0e84fa8e4df5b325bdde916df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a02f8be2985121c28efe9ded7707ce52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 153KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE