b2936a3764439f2ef40fe41e6432209e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2936a3764439f2ef40fe41e6432209e_JaffaCakes118
Size

130KB
MD5

b2936a3764439f2ef40fe41e6432209e
SHA1

961c32701fe631a8659c062d392229ec6b832063
SHA256

6be642857a8dd58e465ab78d17989c2af2771076627cdd69d460e3dfe761de5f
SHA512

44e53923b4a06574564448fd04d239e3c3efc9f3774a7494140996a9938e2a62acda777f4edf59f8349c49d39d79bf1be6202b9927f840994f661349fd0d8f29
SSDEEP

3072:aasWak0QqrwDhObUOwGX1nlyw+W1S0gwS901PO:NscIyBIIHsS0gwS9P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2936a3764439f2ef40fe41e6432209e_JaffaCakes118

Files

b2936a3764439f2ef40fe41e6432209e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 35KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE