71f92883155bdc094db35a3efb39bd66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71f92883155bdc094db35a3efb39bd66_JaffaCakes118
Size

439KB
MD5

71f92883155bdc094db35a3efb39bd66
SHA1

5c9c0b1d1a844ffba83dce8e76ac00acc106bd27
SHA256

b8e77a249de59047ea7f8e8efeb4347de781e441bb8d5874b21cd4479b9dd0fb
SHA512

4219b729817e190dd5c6c2ef175aa360c17db73677eeb96b2b94a01f74e56bc78d18611bec9ede3611cc753bc138724c9e5ca5c1a2cd62af91297d1b1fae5dbc
SSDEEP

12288:Joi2TrSl/ZO7CuUmC6/WIWj+UykpkVrt8JsZ:+i2Cl/QOdcTqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71f92883155bdc094db35a3efb39bd66_JaffaCakes118

Files

71f92883155bdc094db35a3efb39bd66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6bf8f9f4e08fb09c770ac85dfc315564

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wininet

InternetCloseHandle

advapi32

RegCloseKey

version

GetFileVersionInfoA

comctl32

ImageList_Add

comdlg32

GetOpenFileNameA

gdi32

BitBlt

shell32

ShellExecuteA

user32

ActivateKeyboardLayout

oleaut32

SafeArrayCreate

Sections

.text
Size: 422KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE