8b88b9a422b9c0814cf1df2d6df0aff8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b88b9a422b9c0814cf1df2d6df0aff8_JaffaCakes118
Size

344KB
MD5

8b88b9a422b9c0814cf1df2d6df0aff8
SHA1

705b6caef047f600c372a46553dbd1784eedda6c
SHA256

df5a1de6ebde307182f6cfefeb9eaa68d1785d08a073d1d537e0b67a00dc367f
SHA512

07b3e8b83ab64916dc9518ab2a828fb7a0c26fbbc067ac5c5a442f3d0312f0842f49e4fa0e7194c7908ac175b3d60075b9a0e0124bbeec6dbbac366d34b47f2b
SSDEEP

6144:163k1G49kgqCUG1t0UR2xL4FQhuxFQ1GJZGtD2/YHOEaXeZNWbd6PTmAjS3Ibk:PI42VLIWUiQFVqppHOdXeZNWZ6PfjS3F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b88b9a422b9c0814cf1df2d6df0aff8_JaffaCakes118

Files

8b88b9a422b9c0814cf1df2d6df0aff8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a28bab276cc4d273374549e0e8f6bd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

ChangeServiceConfigA

ole32

CoInitialize

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 336KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE