0ea0d8baa4b0b42b279c066a982dc83d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ea0d8baa4b0b42b279c066a982dc83d_JaffaCakes118
Size

98KB
MD5

0ea0d8baa4b0b42b279c066a982dc83d
SHA1

18c0312688c7bfea62a971e9cfa298445b294621
SHA256

78c32d770011a7b5761af86c160b5003edadc79884b299be313207a0a32f2b36
SHA512

2a0bc3eee8dd071d93bf3e259358eb8ef51e5465f5879061e760abef1fcec09971ae31d98877eb021deac12aac42ef6b09b79eff5ebf7752e3466413c0edded0
SSDEEP

1536:bLEvTKI8yotbGUAn+A8LqJ4BOF19MdoTCpF1N:bLIZotjAn+BOF1KdoGX1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ea0d8baa4b0b42b279c066a982dc83d_JaffaCakes118

Files

0ea0d8baa4b0b42b279c066a982dc83d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88e23bdd960f9c4902391b2f2f696a24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shfolder

SHGetFolderPathA

Sections

CODE
Size: 43KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE