5455d14e2239f7e9390fbd22ce2a6ead_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5455d14e2239f7e9390fbd22ce2a6ead_JaffaCakes118
Size

1.4MB
MD5

5455d14e2239f7e9390fbd22ce2a6ead
SHA1

9b3a2bd6020d81687f3bb86dc82472070c74f36c
SHA256

abe7d0cdcf1d1831aa92a981e1b8a63fff46258ebf9c12f262881fb664dee3c9
SHA512

bb99ebf6dc1e2562ffb1f121bcf41218a7db25ddf026dc37e84de26da52b5c78a79b2e04e6907ca40c4ce5b94b76b049d8d9a8370b25441b885ace7952e41ec1
SSDEEP

24576:czG5ypHrNxT4/Ey9vJta6l+4vWGPVtota+xsY83ABT8HNhCC7zxFQolWY4tv:6gypLNxMscJta6hvDotaus4W5PxeolQv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5455d14e2239f7e9390fbd22ce2a6ead_JaffaCakes118

Files

5455d14e2239f7e9390fbd22ce2a6ead_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9be0a5700a8331ebb5ad9d34e60c4f8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

winmm

timeGetTime

Sections

CODE
Size: 1.4MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE