ec14ad233296f059988fe09667ed79a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec14ad233296f059988fe09667ed79a0_JaffaCakes118
Size

279KB
MD5

ec14ad233296f059988fe09667ed79a0
SHA1

541a242b0376df91ee2fc72bde2eba1733eaf587
SHA256

98b80a772141c079e9363bb7d20d151e69f4c0edae7e068698f1d714bd33b436
SHA512

5719ff8c60f84d0eb4a8762ccb5d9bddac05373a190d14437c69cb6dee7ba201ab11c3a525266c637f8cf546fc08ce9b1aad3a5c63560e9aacfa8fd963e72d97
SSDEEP

6144:HfMH+yONBB6VD9WMkZPQpK2Vxls0U3C4lEMjXFjaBJyepCIyscYcOWvDSloXTd:Hf19+WMkNoVxHU3zqMzFSyepXpFWv2Sp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec14ad233296f059988fe09667ed79a0_JaffaCakes118

Files

ec14ad233296f059988fe09667ed79a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 272KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE