8247007de99d64b51907626ab4f768e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8247007de99d64b51907626ab4f768e5_JaffaCakes118
Size

85KB
MD5

8247007de99d64b51907626ab4f768e5
SHA1

c31dce9fee02adf70bad7ed6aafab377ef2d8ae7
SHA256

463e99c307e02e162bb9436a8cc97a4707ff39a4bbe020f4ea5d0efab0dcbdb1
SHA512

0ad9ef3da7080b0735033a30159ad03eebbc11ad8971b92ce270ed397446176d23cdb54a0f46502fa3e23be2c419f6662c355dd67ab9553566839ab2a5600994
SSDEEP

1536:SlKtpYx4FZIozNFKeVm0tuD3IPOTEFTmyOqwFe6ke/yUvi:Jtix4FZBNF+0tuDYmYlmyMNk0v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8247007de99d64b51907626ab4f768e5_JaffaCakes118

Files

8247007de99d64b51907626ab4f768e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae23a99424fa891bfe44915fc1079af9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

urlmon

HlinkNavigateString

Sections

.text
Size: 53KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE