7152ca7a5c97ef8af07a05c57efb7fc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7152ca7a5c97ef8af07a05c57efb7fc8_JaffaCakes118
Size

43KB
MD5

7152ca7a5c97ef8af07a05c57efb7fc8
SHA1

729c8e346e183f6e5388f007ede4e324d2d2288a
SHA256

eb4cf6a7d6069b748798ff60c89f839d52f95ca27a170d967a4bd418c5d6f844
SHA512

00d3c7213247fdd368d286c86d619e755fba3ae65febe21f6d792ab3d5ada5311b026e1a7e68170fbe9ccff65578d92c9b2bfd4f141590e4d8e6bf39c2c8379a
SSDEEP

768:zgG22T+eShQ4yHRCBGA7CJ3ZsA9KEadCXH4oAVoHLNr2bcJ:zJ2GcBFCJaAKCXH4LgL92Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7152ca7a5c97ef8af07a05c57efb7fc8_JaffaCakes118

Files

7152ca7a5c97ef8af07a05c57efb7fc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebafac331daa78bdbdc501f931a0bde3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

Sections

CODE
Size: 37KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE