183396b99a4c6be60ac3bd767be2d4af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

183396b99a4c6be60ac3bd767be2d4af_JaffaCakes118
Size

82KB
MD5

183396b99a4c6be60ac3bd767be2d4af
SHA1

8275dd3344c91b15ba875817d7dd2ff238b3ff9b
SHA256

d3acd59cdd7659c311dee78c02233667d9e08008a79e1bd2fb2ac83814ff87a0
SHA512

8094e524b5dec1872067e845e899001b4491d68a7f86c16263356ad30dcd40098face600532fd2be9d49aff5e1378ab4c4ee2c477a39a8b01f169b3206581454
SSDEEP

1536:R1L5+h66TQTBaFIkkKpao+s9sbVYWe/tlsBvzKJhUs/AL5m9StFJZn:3Ln6asssubVY/PEvzKJqsYL5m9S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
183396b99a4c6be60ac3bd767be2d4af_JaffaCakes118

Files

183396b99a4c6be60ac3bd767be2d4af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935fca4d18d739f0316205d6b9e8907e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteExA

wsock32

WSACleanup

netapi32

Netbios

Sections

CODE
Size: 74KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE