960a3586e2a5a0f610f105d86924cd4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

960a3586e2a5a0f610f105d86924cd4d_JaffaCakes118
Size

393KB
MD5

960a3586e2a5a0f610f105d86924cd4d
SHA1

b95f6b04a8c32520e8cd027be6e5ae2a57a8e9e6
SHA256

1cbdce493cde2e0a73674780cc334d0516eb52aae4af1d2783b287d54bbf2ec9
SHA512

5c6cd9a92b6a130570a3584d43b7de067b5fd5999c653a52d339d969b5421609fd5050f630b5d6a6d3a5660473c1f5c39d295634379ee568abfa8e89651847ff
SSDEEP

12288:zTR5gRX6+KZBUGQ46EzGJNypSJ1zAdcFqvGNahiO:zTPSX6+KZBzkycJ1YcouIh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960a3586e2a5a0f610f105d86924cd4d_JaffaCakes118

Files

960a3586e2a5a0f610f105d86924cd4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e04838811ebb14eb61f16a85d072deaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

CloseServiceHandle

ole32

CoInitialize

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 378KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE