2909dfa67388c8ac7dc22ae21a6ec999_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2909dfa67388c8ac7dc22ae21a6ec999_JaffaCakes118
Size

45KB
MD5

2909dfa67388c8ac7dc22ae21a6ec999
SHA1

a034c3a19326b501c42bf244e3be47359bd46a1f
SHA256

c0effae6a0a6571cf5aa90570fca4a91be8cc3126ff0ad6dc53d6417f4c1969f
SHA512

e4eadb200c9fccc8d64086b99d89a68e66c1a0d300c318b70917b2388dd9d92388a35dfa28da19597bce207ee578fbf9677fc2e0337aae689ffc6620ad762119
SSDEEP

768:zMjGVxZCDXGPOd3pHCg4/22mWKqp38N493YHTUYqie8WE6/vrVFW+i:zMjGVxZCDXGQ3RK22Ux49oz1WE6TTi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2909dfa67388c8ac7dc22ae21a6ec999_JaffaCakes118

Files

2909dfa67388c8ac7dc22ae21a6ec999_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acb329246d9827cd008494718ad202df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

ShellExecuteA

Sections

.text
Size: 40KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE