2cfb9ee05888b3adf121ae6fa731ff9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cfb9ee05888b3adf121ae6fa731ff9f_JaffaCakes118
Size

33KB
MD5

2cfb9ee05888b3adf121ae6fa731ff9f
SHA1

1e28b5232b4017afd1a51420ecf7e0815db27561
SHA256

a3d9d97c38b6ac6a4f1904e2baf031ea278539b725ce54665d2ea1419429c076
SHA512

b0d3b3e87ec7e1cfc87187e839e0d07e7b09a7da42f0dc0c9b01506acef552e0ffb3b02919f48140fbc09b66728e86febd5506c248ebdaf497101d7772a1e286
SSDEEP

384:0m2TwmlZUVVBLENymI2f9ZG9EVblIqT3RXP9KUesvZL8KDPIKD2gVKDoldP7IVnN:0m2TwXVBLENJ3VZGaV5z39c8LLhn4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cfb9ee05888b3adf121ae6fa731ff9f_JaffaCakes118

Files

2cfb9ee05888b3adf121ae6fa731ff9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37f3cd05a4ed0aa309b2569719cfa873

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

Sections

CODE
Size: 18KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE