77aac0c3b354f6b199b58e1340602ec0_JaffaCakes118 | Triage

Sharing

General

Target

77aac0c3b354f6b199b58e1340602ec0_JaffaCakes118
Size

27KB
MD5

77aac0c3b354f6b199b58e1340602ec0
SHA1

1f70fff244b7eb03414a0b6242e84d8b4341db57
SHA256

bb63183ed7ac89905ba72c82fab81490768c0f7114265f2a09f445715a97e214
SHA512

e4d657bcb8a5ec9ea955c9afd8b3c8ef5a5b9043759cb89a0be3e3a83e20ff6c4b361f6ddc03f5748abbf0e04c73b613101869332163893a3390f67582cd71ea
SSDEEP

384:txwhp3TBkFFYjwdKLb6j2TKZRaqpfECjNYoVq2rm/Y/Gl7kHepguAAjAACPXL+fS:txwhpdklJjtbSR2cl7kHnXXL6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77aac0c3b354f6b199b58e1340602ec0_JaffaCakes118

Files

77aac0c3b354f6b199b58e1340602ec0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9534fcd0f693009c88102eb0630b67fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

CODE
Size: 17KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE