422ea00f75d10b5206f302ff0f08c5da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

422ea00f75d10b5206f302ff0f08c5da_JaffaCakes118
Size

161KB
MD5

422ea00f75d10b5206f302ff0f08c5da
SHA1

24e6740f484d22bbc6c66d6159b2fa902061bccd
SHA256

9f386df2e817cf24f7a09883241ffafd6921cc731463756b31d64c732973873b
SHA512

a2c90a8667fcaff99fd3dee68c101a28f11d8d9873c033ec133601f5ef84c4175e35eea67b97b2b28a89508eaa0b3f8d42b6f64dbeaac542322d4300c0ee62a9
SSDEEP

3072:wtlIpzt+n44TRVFP+MEKL3EPPeTUNMQAnVTkb8uRCFe8R/Cgcv:yWzknLTRNEwUNMQAVgAP/CgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422ea00f75d10b5206f302ff0f08c5da_JaffaCakes118

Files

422ea00f75d10b5206f302ff0f08c5da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 147KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE