7017662eaf31f980e86a38211589433b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7017662eaf31f980e86a38211589433b_JaffaCakes118
Size

53KB
MD5

7017662eaf31f980e86a38211589433b
SHA1

fd78f874f39641389b30a3cbe38f39a15375d6c6
SHA256

6c0d01b5bdcef3abf6edc7ad20478a92280a74d992b78e79aad1c722e6cdbf68
SHA512

a4b0ce465f50e9adc438fda5285b12e6d54debe005128126258abd66f7b24def6c3542151aa10e7a3702a7999ef944870430e13723c5361d1e5fcd5d4b22f987
SSDEEP

1536:LhFzqhfrQhFs5qf6jdgApbpsE90e8bAEl:Lbe1rQonplsfHbpl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7017662eaf31f980e86a38211589433b_JaffaCakes118

Files

7017662eaf31f980e86a38211589433b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8110008e8e3b78c7ec6e1f29c9dd7877

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

shell32

SHGetSpecialFolderLocation

ole32

CoCreateGuid

oleaut32

VariantClear

psapi

GetModuleFileNameExA

Sections

.text
Size: 22KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE