5ab6dd9a34fc94909e25daf20790744b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ab6dd9a34fc94909e25daf20790744b_JaffaCakes118
Size

99KB
MD5

5ab6dd9a34fc94909e25daf20790744b
SHA1

8038e220faac1f1d3b2d7c65815cf17aa34ed182
SHA256

e02554a12f5d49c18693091e9ee01c24f115d833bc62d5e6b0888dc06d7fff32
SHA512

2f597ba66c8a7610df1be4233c56f93586204f864bc46142eb164930ab55061d80f680cd957cf68ffebfe6748ae160032e1d1966b441aff15abe2644ddaa3cc2
SSDEEP

1536:OOdFyasQh6BBq/AE6W+wskjOk8pzH9euzlkJaApKR4i2zyk5CogZznkhfIO9FeQ:9GdQhnAE6fwqzdeuzlL5kAN5khdJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab6dd9a34fc94909e25daf20790744b_JaffaCakes118

Files

5ab6dd9a34fc94909e25daf20790744b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2f629a09a5e93b60f0f4025e1151ff7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

Sections

pec1
Size: 46KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE