38ef4e5fe94aedf6ba98b672b8586e91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38ef4e5fe94aedf6ba98b672b8586e91_JaffaCakes118
Size

8KB
MD5

38ef4e5fe94aedf6ba98b672b8586e91
SHA1

3cee241b9c0a7dacd8174eed9b1196096e97145a
SHA256

60a8b04d41f113d3552f7e4dd5693568af037924d7db3851af9a11890e976e39
SHA512

07de8e08bf0852018dc533a2846722f36ce645eb0fe30acf3818d4713911cf9bf8d8dad55810d85542df5a1d16a3443f3084da542d92802acfa8abaf9799bd47
SSDEEP

192:n0Gexy0A1JtXyvcw/nLZcjHZ8KdNJcfkts+iv1/HNt/i:cOgv9q+iPqvNX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38ef4e5fe94aedf6ba98b672b8586e91_JaffaCakes118

Files

38ef4e5fe94aedf6ba98b672b8586e91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

414b835707eec2e81853525f82412f6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegSetValueExA

ole32

CoInitializeSecurity

shell32

ShellExecuteA

Sections

CODE
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE