3af9ea1ea90f9d3475dbb1b00454b74f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3af9ea1ea90f9d3475dbb1b00454b74f_JaffaCakes118
Size

528KB
MD5

3af9ea1ea90f9d3475dbb1b00454b74f
SHA1

0edec72c2c070093ff64cba4a02375a4c0b53211
SHA256

a795e8eec0de2b1f85324ab4e72d5334512251351ec611fe0b85d6247f3d1fc3
SHA512

7a61bbeed645c15e4b2f302a55935064fa76ce57ce1163d946bca19dc5a30cd9e50bc90840fc54a8cfb74800a5bae3b93a2db482bebee1f9a85eaa3de40c96c4
SSDEEP

6144:MKqrzxr2rUuujRFc++nwOp1kYvXXJ7EtV5cI22MsS3IsfH4SJkC+CByY5:MK6uUuu9v+nhkE2MsS30jCpb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af9ea1ea90f9d3475dbb1b00454b74f_JaffaCakes118

Files

3af9ea1ea90f9d3475dbb1b00454b74f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935fca4d18d739f0316205d6b9e8907e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteExA

wsock32

WSACleanup

netapi32

Netbios

Sections

CODE
Size: 63KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE