3a454c6d7d04e571845f69b06698fcd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a454c6d7d04e571845f69b06698fcd7_JaffaCakes118
Size

1.0MB
MD5

3a454c6d7d04e571845f69b06698fcd7
SHA1

3e5d81997975ff6a7751a750054a1c16aaaf56f1
SHA256

e36a4ca7336dbce6dfa2edcd9d2e10d2688b3067ebc7e9f6c0b55b657a4f4c3e
SHA512

ae7763f3d3ee1090a71e2c67b3d79f8c96190fedc527d5bd7468fb76f523e4e5c919a07895d3d835398dee195d097caaee15f6c741dddaf5def6719f51c0a78e
SSDEEP

24576:qcs19Ot7IxLabX8Aq6K9zraUvphRCaKBbN8RM:q79ur8Aq6cPjRCaKB58R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a454c6d7d04e571845f69b06698fcd7_JaffaCakes118

Files

3a454c6d7d04e571845f69b06698fcd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6ffb9014d502d1650226318aef9871f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 1.0MB - Virtual size: 18.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE