0d361f38d3093c7075ef0d0d91a15c79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d361f38d3093c7075ef0d0d91a15c79_JaffaCakes118
Size

293KB
MD5

0d361f38d3093c7075ef0d0d91a15c79
SHA1

e217d6a476f161a37efb543c46b0cd76a9065f49
SHA256

2e69816e25063b098618a2f802527f1ec442ff1412a66bbf8142f6784d02418d
SHA512

78f9108e442bd83066bcd65fa6576f3b1ba1ad26160d513e1706598f92c88d1e830ce557e19e490d7596130a532a50f1d1f8e4d899f796e5afdae04f2199d08c
SSDEEP

6144:U5wrma1vol/HrLIqoCoj9ZsH4rWMbCRKSEmqPUrhbhw4p0bYa+HBmHh5eG:Uumaw/HrU/Cojj22WMOEpPubhubYs5eG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d361f38d3093c7075ef0d0d91a15c79_JaffaCakes118

Files

0d361f38d3093c7075ef0d0d91a15c79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5458788449a4ada6cfa0aac457de84f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteExA

Sections

.text
Size: 274KB - Virtual size: 924KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE