e86cd12973c8f65db5e2b4ca940f728e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e86cd12973c8f65db5e2b4ca940f728e_JaffaCakes118
Size

27KB
MD5

e86cd12973c8f65db5e2b4ca940f728e
SHA1

14a20f4dc2230de1487f4be62e8f3acc3d8b58de
SHA256

d42623514bbb0c1031339c8385ab595b79a2374bfe82a929a56ed7f480ea90ad
SHA512

5ee98457eda1ad1e16b7b06b8d7f6f8a85be3b186bf38bc6980ee343d1effc89ccf6dee1dcb87047423273e4a0d7f3d90b4d3758dff885e544b4c0734371ae08
SSDEEP

768:mb/PA9EbtXw6geCHG3bzxb+hTdsXb4rn8gA2H:A3AOg9mL8hTGkr8gh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e86cd12973c8f65db5e2b4ca940f728e_JaffaCakes118

Files

e86cd12973c8f65db5e2b4ca940f728e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9534fcd0f693009c88102eb0630b67fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

CODE
Size: 18KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE