09db7f4f84c08cc011fa8d4885be94e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09db7f4f84c08cc011fa8d4885be94e2_JaffaCakes118
Size

48KB
MD5

09db7f4f84c08cc011fa8d4885be94e2
SHA1

9021e76fa57354fdaa8316079e0ba847decbd306
SHA256

78c9689f230fd8c960293348bdb94b61206ff62ca3879cbfb6a9d90167d0bfb3
SHA512

6eea4a66b17f4db28e91e6c5b159b97d9f86b6e56bd9194e3ac285ee7431dd03e5bbd459ff2d28473d9d8c7bf74dad951968cb779441fa17a530bd8a72b326a6
SSDEEP

768:bPEzRmVYWb1L4/aFBj+1RAxaY9kg/eAtYeFeJvuDLLkwIIwil3lq:r8RmVRj4dYSieAtYecJil3g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09db7f4f84c08cc011fa8d4885be94e2_JaffaCakes118

Files

09db7f4f84c08cc011fa8d4885be94e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37f3cd05a4ed0aa309b2569719cfa873

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

Sections

CODE
Size: 42KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE