72a23f833064fcc429c0d19a9a851566_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72a23f833064fcc429c0d19a9a851566_JaffaCakes118
Size

81KB
MD5

72a23f833064fcc429c0d19a9a851566
SHA1

0917739e6a25951fba5a5f17fc96aecd345020ee
SHA256

92ce0787f469fb95e4e919775a8514a9efb7b7c74f8dd1d6c3c676170b2b1c8d
SHA512

52ed08df49735c28098b3567eeb5b11b31f53f3c6649db3d6d0bcf62400441aab83072c059c3b7d5ac5c01311f35b0d617191a6624a6b68fc5b4fef59af772cb
SSDEEP

1536:CdVgoCjRSrKypDe/sBHanHO8vI19OedUmNk6UxzVKua:EPCjRqDe/sZ+E4e+mNk6UxzVKu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72a23f833064fcc429c0d19a9a851566_JaffaCakes118

Files

72a23f833064fcc429c0d19a9a851566_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a733a1b8a2ddf6a36416343efdf27b46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ole32

IsEqualGUID

urlmon

MkParseDisplayNameEx

shell32

SHGetSpecialFolderPathA

Sections

CODE
Size: 67KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE