b3d917167c5a024114a791acf9100f72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3d917167c5a024114a791acf9100f72_JaffaCakes118
Size

130KB
MD5

b3d917167c5a024114a791acf9100f72
SHA1

cf3914b565f692e974e940a37dcacc3252f6ee5f
SHA256

2c27e496983c6bb314449a5e2c9f5759073434721719ba68f087b73cf3ed198c
SHA512

b7973fa36f6101d5be87a815356cef4aae34d4adb9c4edca1dbdb12920a9eb96c72142b89a683c05304c4dad656c1e2ef388385f1e3fd2241f834c5b41cc9458
SSDEEP

3072:1jP/1H2Ie5V6EtLW/PaGOCSX9JMDqyS3IiH/ywFo9x:1Pe5UPR6ZH3IiH/ZGv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3d917167c5a024114a791acf9100f72_JaffaCakes118

Files

b3d917167c5a024114a791acf9100f72_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a110531a87e9a90a0f8653b00a50f512

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 121KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE