b5dca834181f6ecdcef06dcc1600a398_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5dca834181f6ecdcef06dcc1600a398_JaffaCakes118
Size

74KB
MD5

b5dca834181f6ecdcef06dcc1600a398
SHA1

b9468b33f4918b2c23464be57b5e8d53b12ca7ce
SHA256

7bc009bd273a748b830a455e833f1f7e1b528fd8eab439813f19386222da9509
SHA512

62b27db7ce6f7c1c80a2ec0d73e30aa720f71b6fd5291c74bee2d1ffe0dc0d68b4f16cb586b9752a526c0cb91613a91bbb4f8ce5732c9d36eb2003285dd60d80
SSDEEP

1536:PQ2d1zZXqVrm+N4saVGghRFziX2HENI6ArBsh4A8l16AKnIELMd3IorSL:IUxqVKKZkVR7HRBsh4A8l16fnjEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5dca834181f6ecdcef06dcc1600a398_JaffaCakes118

Files

b5dca834181f6ecdcef06dcc1600a398_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 69KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE