2edc4acb284589c725cbc544b6342e14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2edc4acb284589c725cbc544b6342e14_JaffaCakes118
Size

239KB
MD5

2edc4acb284589c725cbc544b6342e14
SHA1

5154adf451084f00e8886c16792d8387da790434
SHA256

f7aebaf6ee4d85884410efecccc0fbb44e1ff29d3b4dfdd8746cb6e2e6b80448
SHA512

85d3af29d54ff55b5cec687617b81f0ded5e64728cbf7bea0b22b3fce041e232c9c847adb4d4310fb1478ab35ec36c7965f7472e1d8be759eac347aca430d41f
SSDEEP

6144:DLTeSu0t3oR/pj6cdikcQb+4fOyR+cRCQKmH:vTe0tYzucdA4fBxX9H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2edc4acb284589c725cbc544b6342e14_JaffaCakes118

Files

2edc4acb284589c725cbc544b6342e14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

495297e6d2c0312e87450f8327221bee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetCheckConnectionA

wsock32

WSACleanup

Sections

CODE
Size: 227KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE