393636a1e416c1ec8d314428961b6f93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

393636a1e416c1ec8d314428961b6f93_JaffaCakes118
Size

292KB
MD5

393636a1e416c1ec8d314428961b6f93
SHA1

4abf888c1f4ea3bea280299210862dd4d48510ad
SHA256

93d8d2183808aea7b8e9e3557b8e9c4be941a3d2badfd679878fffa4599adef5
SHA512

217f20d0b9aae01d83503329c62e3945887a0b5350a29ad6892214e9458c04bfa7038301d8ef58fd2acde54cccf5a9e2d86a27d209511ec92bc9f3f24fcde9b4
SSDEEP

6144:PlGFTz9O7QKvOgXPeW/E9QdJv0WnQL7k/keFadDLB:P0FT5OxvfeWkQTvrQLWmZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393636a1e416c1ec8d314428961b6f93_JaffaCakes118

Files

393636a1e416c1ec8d314428961b6f93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 266KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE