2470e550e45a33aad853ad77acfa2502_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2470e550e45a33aad853ad77acfa2502_JaffaCakes118
Size

29KB
MD5

2470e550e45a33aad853ad77acfa2502
SHA1

b9c247c2bd10b621879943c1ed441e444b00b095
SHA256

d9d062950fc5bdff9f620e0d789f125370cf774cc34cb29d4fafb825c0d97f98
SHA512

be066e68bd0e1a4aaa90364b961014088d06700806dd38afebe97d58d5729d9a1f6985cc18415c227ec55810f16183c12abc9774ff20414bd3fbab22ee1e6048
SSDEEP

768:HvhwqW//x7DtQ/qknoEF/d5qqyFDoDv/Kk:Hv6j3xmoEBdIqyFDyvSk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2470e550e45a33aad853ad77acfa2502_JaffaCakes118

Files

2470e550e45a33aad853ad77acfa2502_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c42bf4107481f4960a34f220d5944482

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteA

Sections

CODE
Size: 21KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE