e955234d42c9cf462ff4be35b5df4989_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e955234d42c9cf462ff4be35b5df4989_JaffaCakes118
Size

90KB
MD5

e955234d42c9cf462ff4be35b5df4989
SHA1

d72eec0c6e99bbe1359855466884e6e00adc92fe
SHA256

58b2b54c78a019032a6d18273fe7e964ad20a8c12efc7b9b6aa943a4642c7695
SHA512

30f0e16b29dc134f3cc4fc9c3086bfc4794675ce2a08e807b0de38b72093f8a06fe8843d44971e3912f776dcc260ab56e2c183461a21899ad654f6dca0317580
SSDEEP

1536:6U6K/cUsFMb/B/vKpR66SCWcscAI6cLBGfhqWBcN1s/s5rPRjM1S:6U8k7By6tCWcLPLBGJHmv9P9M1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e955234d42c9cf462ff4be35b5df4989_JaffaCakes118

Files

e955234d42c9cf462ff4be35b5df4989_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de6fdcdc7f4ad649a7529bf91b3c3b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ws2_32

WSCInstallProvider

Sections

CODE
Size: 84KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE