45fb2aad382ce6f069760f5d5034dc2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45fb2aad382ce6f069760f5d5034dc2d_JaffaCakes118
Size

64KB
MD5

45fb2aad382ce6f069760f5d5034dc2d
SHA1

bc722c5e295df05bb8467c002ecb38b7fcdc1f43
SHA256

de14c532439a66b39add76cb3396fe868cd8813a5de9cea9a3fbe449a8ae7293
SHA512

64d0260ac07f7f1831bf2b7be0f4e5f9343cc7391c5031778e93b3b259a5d9541e725ab7b3eec24e3872dbd5de7629f6c0f8de9141e5e17de6ae6502f26708c1
SSDEEP

768:XrYH3sFW71F/2Wetdlqt57BxBjAkIEx3MQKWTAf/NzqhBVT9CAzi078xQ9g:b03siF+9tdEPBAo9MQKWTs/MhrZFjg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45fb2aad382ce6f069760f5d5034dc2d_JaffaCakes118

Files

45fb2aad382ce6f069760f5d5034dc2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b0f7d72261ced23f94c5d3632310a17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

TextOutA

winmm

waveOutWrite

Sections

CODE
Size: 56KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE