3f9c85ccd3f7bb1a9daff1ffbdf87232_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f9c85ccd3f7bb1a9daff1ffbdf87232_JaffaCakes118
Size

44KB
MD5

3f9c85ccd3f7bb1a9daff1ffbdf87232
SHA1

8fc9cedbefa156ae880476234147add4a08dec17
SHA256

3856543628a68f3c773dcd7da016638fd9b429933656e498ebb9a7198cbfe910
SHA512

fdef4a3bf1f83481b72f4fa32cbe3d8de78a6cb6e808709b132e91047751dc1db9193c27c1b80a419c4ecc74d2b08fee3ebd8bc0143d2b7baaeab8fe99bc996f
SSDEEP

768:ieEPfsbr2GwZ1SRX2XrVQy508Rv/IgQnOorbxkhqDove/v7pe0Z3V:RjP+Um7VQyNQnlbxkhqEve9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f9c85ccd3f7bb1a9daff1ffbdf87232_JaffaCakes118

Files

3f9c85ccd3f7bb1a9daff1ffbdf87232_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 39KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE