2627339373dc14dab23c1b117d9281b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2627339373dc14dab23c1b117d9281b8_JaffaCakes118
Size

45KB
MD5

2627339373dc14dab23c1b117d9281b8
SHA1

5bec324f4f31678029543537e7dc0559586d3ea4
SHA256

5af3fa6251aeaf97503c208022963a8a53d82b16480c73a5c96b84e942455ae1
SHA512

956d4b685c51a9f75005af958085591f578a41d525f3c8f264ddaeba1aa01dadaf22c21ebf97446e4ed7387d33b8cc62f5239b944c55f2fa445793f94bef4fb9
SSDEEP

768:hzpYFSv9d8eteVbF/Bu3XaMflfODfuuEtjALMx+jdlqjnDo9+qxfmBLCxUgQMGLc:zz8x6Xa+l5pDDAx+qRYxvG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2627339373dc14dab23c1b117d9281b8_JaffaCakes118

Files

2627339373dc14dab23c1b117d9281b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 39KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE