785a5a4881ffe18f913aaee90adc152a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

785a5a4881ffe18f913aaee90adc152a_JaffaCakes118
Size

344KB
MD5

785a5a4881ffe18f913aaee90adc152a
SHA1

adab80fc8450285598013578c9eb8b97ad4e6b04
SHA256

99501e285f702266abf0847fae357e988953d0fd25e1c1c9b0a7c77149eb1728
SHA512

2dd76f4e95403c8f42f58ec43b4631e7590f854758c445ef90baec10071716f1075ee01082be33f41b6a5d4c7a8c28de596fa895f920a189d12247c0c79ad873
SSDEEP

6144:L63k1G49kgqCpahoDsIWG2PFJQGa5AZPDFP+HVEBSQaoQiVlZPdWn2pja49:xI42VIsIj2P/QgPD5+HVK/5Po8jaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
785a5a4881ffe18f913aaee90adc152a_JaffaCakes118

Files

785a5a4881ffe18f913aaee90adc152a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a28bab276cc4d273374549e0e8f6bd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

ChangeServiceConfigA

ole32

CoInitialize

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 336KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE