368c7de00b3ed52a4ba1b508e26a13e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

368c7de00b3ed52a4ba1b508e26a13e7_JaffaCakes118
Size

461KB
MD5

368c7de00b3ed52a4ba1b508e26a13e7
SHA1

6a1aae690d725967e608b405e8fb280372164038
SHA256

e462dae59ddfa765cafab351c970f1da871ca2036194b61f5e55193a22ce2d49
SHA512

276f3952059cb2c6cc659d8619741168c2479a403b76258b258ca68433aeb7fdeee027a6a5fac696c66bd40e680f78e805e05ac8099247c7b14f40bda155f3ba
SSDEEP

12288:Dr1WiLwWEaCmqp43s39OHCkM4ch8eLZW6kfYV2Q2x6Dlx:9WOt2mL3s3gbMoL6RBeQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
368c7de00b3ed52a4ba1b508e26a13e7_JaffaCakes118

Files

368c7de00b3ed52a4ba1b508e26a13e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e528881d50051087b0c3686b701bf7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

GetUserNameA

ole32

CoInitialize

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 332KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE