5baac45c901a4b6280d25c93bdac94de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5baac45c901a4b6280d25c93bdac94de_JaffaCakes118
Size

56KB
MD5

5baac45c901a4b6280d25c93bdac94de
SHA1

90a9cc7aae8a1339bce7449a5ce4f88c4136836c
SHA256

8ad952aca76cb6efabbc7fc67de5ac355b12df02e6b831420bd2d5680b6ccb4d
SHA512

dd5739cd7314899bc84fa7a897e1b338b19e6d7318cdd4e35fbc432ba6f904049aee78a17f919c1447e1ff6bde70b4389c8aaecf3b9fc19510819d61c0f4d32d
SSDEEP

1536:lg/FHAxbdvNCgyqjKKKKKKKKKKKKKKKKKKKIUDQ47Nik8Bp:y/tkbtvUDn5ip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5baac45c901a4b6280d25c93bdac94de_JaffaCakes118

Files

5baac45c901a4b6280d25c93bdac94de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c7c179f0127b28ee6f5bf78efbda5d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

shell32

ShellExecuteA

Sections

CODE
Size: 17KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE