3e076c7f6913eeeaa3df024838e67211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e076c7f6913eeeaa3df024838e67211_JaffaCakes118
Size

1.2MB
MD5

3e076c7f6913eeeaa3df024838e67211
SHA1

248bb722629d1c9b9b67de94456ec73a83093723
SHA256

157c353e03fddf53bd2e48acf6eaf045a297459f5c165b59f0cfaee91e86f6b9
SHA512

cf5b1f04c9014709b17e08fb0c0dd7fba605780e973646b3b0c3a05ef67bf39c7741c6e4c93a506c0e018a3a644776967738352fca8706c9f736081f6683502a
SSDEEP

24576:7RFBQK31aU6GPHVHvkzmLd/XvJODc5dVBRv6nxhtwdhLKw7y7b:72YYUxtPOQdXvJOSVBRvOxXwdhLKz7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e076c7f6913eeeaa3df024838e67211_JaffaCakes118

Files

3e076c7f6913eeeaa3df024838e67211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d43cd5e399f31c49a6f934c29809b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

Sections

.text
Size: 1.2MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE