74f15b7cde80c61646f555c20f696a15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74f15b7cde80c61646f555c20f696a15_JaffaCakes118
Size

360KB
MD5

74f15b7cde80c61646f555c20f696a15
SHA1

c8b95109a164ca17c6b26756681534c4f2e9bf64
SHA256

f595c746b25d72ce452949a6709b0a87f972b31118dde58e20b812623ffd5111
SHA512

b72ea68ffd3526c9d51aac29855afa5f7f099ebc17fd2efd556123f16dd7f8d473990cb3acbea9c0f9bd1123aeb4ad6cd78b6d8e6332b2c13be9f04f52fd536d
SSDEEP

6144:Z0fSbtr6KUgQUhcU7AiY+C2E3xZDtoaCrFz/SM3tOfH83yCJVego1tR:ZR//XhcU7AitnEp/IFz/Sw3y4Vej1b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74f15b7cde80c61646f555c20f696a15_JaffaCakes118

Files

74f15b7cde80c61646f555c20f696a15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39a79347d61c5b5d69a4d6f539eaa85d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

StartServiceA

ole32

CoTaskMemFree

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 323KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE