6eec6620aaa47a43d1d5e5b889fff643_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eec6620aaa47a43d1d5e5b889fff643_JaffaCakes118
Size

79KB
MD5

6eec6620aaa47a43d1d5e5b889fff643
SHA1

0f5fc11f1c0aab3b4ceb000d91e93f9f09f0b0e7
SHA256

fafd46cf2a9f572b01fd1ff1ec1c0746ad0ff14e14af0c446db933955b5fef1f
SHA512

a3b68c44d29670cfba06427acde65b1e35f951db1f18ce42bb7550a2315605c877df727ee39c837ce4755aa31fa20469d06211cf0e63cc5867ce9b201043289a
SSDEEP

1536:UrwXj/bFhJFA7bfLVNnrEu7ZFbXsJZMKUDyx9eNmiW63hqIkGaow:Uaj/bFVA7NNrlLsJ6zDyxkNmiWKgjD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6eec6620aaa47a43d1d5e5b889fff643_JaffaCakes118

Files

6eec6620aaa47a43d1d5e5b889fff643_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fb72b6342d05f68efa6339a11d4b212

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

wininet

InternetSetOptionA

shell32

ShellExecuteA

Sections

.text
Size: 74KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE