f7dc3dc97531a5e9a799ed5f32efb0af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7dc3dc97531a5e9a799ed5f32efb0af_JaffaCakes118
Size

67KB
MD5

f7dc3dc97531a5e9a799ed5f32efb0af
SHA1

7333ff9f7a8e54698dfb5c02b8c89490bcaea63b
SHA256

0b1c1cdd931dae89fda113e0b1e1a0f0125d623ba067f2e750430eeecb7852a8
SHA512

d76848418be63001813a8e0544c87cf984a6d69ae945d8c07159bf275cf637c114335008d2bc3df4f5101c801b78170094bfa237776979595aaa96e115ee966b
SSDEEP

1536:Wzjh9+OyCDuuWLJzMWEG776PePKkiRvoDG9/paRS1zg48:W/hgOXDjWtRnPKkiEwhaRSG48

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7dc3dc97531a5e9a799ed5f32efb0af_JaffaCakes118

Files

f7dc3dc97531a5e9a799ed5f32efb0af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9a1c5d869ec4841b1d15ff64a71b707

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

shell32

ShellExecuteA

Sections

CODE
Size: 36KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE