269c6c15d6556a841526ec64a28cb715_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

269c6c15d6556a841526ec64a28cb715_JaffaCakes118
Size

416KB
MD5

269c6c15d6556a841526ec64a28cb715
SHA1

3fe83f0e25e2e6ce3b9c08b931b7396cbc04546f
SHA256

af0599e60f11150fbdc4bd4d7f8a45526fbae1e3fa41b832ec1530f0cd4c5a25
SHA512

17cfc6ce6a189b604bce0110802f4e82aa0fa8ff03720ca8d500e702682c0d2e07d88cab61cb2fdbf5efd3ef1af5b2578734bd1a687a7fb0f2fc244984e0387b
SSDEEP

12288:v60fOkxKY3jpA9vfMG/cgbKg6jyPPDlnTK8g:vxfOkVTpAJBcg2ByZrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
269c6c15d6556a841526ec64a28cb715_JaffaCakes118

Files

269c6c15d6556a841526ec64a28cb715_JaffaCakes118
.exe windows:4 windows x86 arch:x86

862820dc0a5d54f7138e5e064afbfe09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

ChangeServiceConfigA

ole32

CoTaskMemFree

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 323KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE