1497f2e1ffd62df180fa996d7dc5661a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1497f2e1ffd62df180fa996d7dc5661a_JaffaCakes118
Size

54KB
MD5

1497f2e1ffd62df180fa996d7dc5661a
SHA1

b33a59d30232092214d8e3fbc9e37412111013f4
SHA256

38edd505d9dd7b3df0ca80d026d921ce1c7e5f25a545cff7adf92f972c87102f
SHA512

47adbe6b66221dcf40dfb29aeac0ca8509100bdc03a77215654be9d0cb5993666e3dfb52c7881e528c4e521c4071deb3b2f170c05e19187a1d93e4f5cb4907b6
SSDEEP

1536:yox768RPlyoeSyN6/J86HRwwHJBpetl5A00WPhUde:h7Lf3yN6/J4SMtl5Ao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1497f2e1ffd62df180fa996d7dc5661a_JaffaCakes118

Files

1497f2e1ffd62df180fa996d7dc5661a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 43KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE