7362771b26610955208c4dc32e4f3d0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7362771b26610955208c4dc32e4f3d0f_JaffaCakes118
Size

312KB
MD5

7362771b26610955208c4dc32e4f3d0f
SHA1

10f6c3286e12b7ffa3ef8defd5a431877bcf471f
SHA256

39f463f1318e6d7ca7c6752f31ea2aee3928ef7c01d576b67f51bf8ed2545299
SHA512

36e1702f343398fc1ba6878003c85037149d37470687bd7ae1322ef47cc6bae9dd2d1bd6ff193de09e40b54b0527c9303504d3ee83d54ae977487cf8db330baf
SSDEEP

3072:BVSKjezPiphENo6jrn1wpKfEhrOryLDAthE:BVSSXko9KfiHAta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7362771b26610955208c4dc32e4f3d0f_JaffaCakes118

Files

7362771b26610955208c4dc32e4f3d0f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d975e67c56935cbdd8d15c60c37c5eb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

SetTextColor

winmm

waveOutGetPosition

Sections

CODE
Size: 105KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 206KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE