1a8c2feaeaad186751ee62b88bce7d3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a8c2feaeaad186751ee62b88bce7d3a_JaffaCakes118
Size

48KB
MD5

1a8c2feaeaad186751ee62b88bce7d3a
SHA1

750c13be2d0feddc4a3cad44e293e6d9544c795d
SHA256

1e20510bbd307a2b77630933fb835c6c5a14a150749859b9bb63cf3d143652f8
SHA512

bc312bccdcb4cbd0622012ebf5299ee3cce2560f936447e3b5829b777bf4c261e0405ccd8cb97dfbd77d6aeaba926b0796f880514e80958bbb6cab13682e4d16
SSDEEP

1536:Kox768RPlyoeSyN6/J86HRwwHJBpetl5A00WPj:p7Lf3yN6/J4SMtl5AU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a8c2feaeaad186751ee62b88bce7d3a_JaffaCakes118

Files

1a8c2feaeaad186751ee62b88bce7d3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 43KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE