498113ed01a22aeca77a53cbb38e08eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

498113ed01a22aeca77a53cbb38e08eb_JaffaCakes118
Size

83KB
MD5

498113ed01a22aeca77a53cbb38e08eb
SHA1

b037c8d53ad1ad9de9b34c700147cf2368c502a7
SHA256

bf06bd0cdbb91b7f80217d20bce18dc05215d7ca31bc3616adae9ac7c7f38d63
SHA512

f1f8dba1fc95b804b7d3038781add9f947c9212a18df8583cb959d81616bf5e483dcdd68e6dc3a3b1f31d325523ef8c7b9f8580fdb05871a8e2083fc67e65ae5
SSDEEP

1536:RaKBeAred9tQy3IC7NC/FCgGu7bNXGgrBNlMkGCdBYd9Uy:UgecM/s4Pu/JGgrLlMkGCdOIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
498113ed01a22aeca77a53cbb38e08eb_JaffaCakes118

Files

498113ed01a22aeca77a53cbb38e08eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd17806675a8ad4ec05146831c7c09a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

winmm

timeGetTime

Sections

CODE
Size: 78KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE