b81992dbe78570f260880a8377c00f6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b81992dbe78570f260880a8377c00f6b_JaffaCakes118
Size

90KB
MD5

b81992dbe78570f260880a8377c00f6b
SHA1

1eb5a5d45b6fd3b7f82e0eedd786278a980724e0
SHA256

b93aa12e29220fb43e6c557ce4f76be523fe3f98b62ccc514520b58be4b3c66d
SHA512

a9a87a6ec6685c28f7a9bd955a5d7c6a2fac596c62a7ac2e1513dd4a6e129ac39587412ab2b7d6800b232fe9c1e2171a32ec6b1ba92f7a338b7f2433de787d7d
SSDEEP

1536:Sb4RZ1eEzu+cnQ+qgwzVU+xHziuWF5GJYAL97LWF1SOkOQYr:SbgDy+cwg+p+vF5OLWF1SOkOQY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b81992dbe78570f260880a8377c00f6b_JaffaCakes118

Files

b81992dbe78570f260880a8377c00f6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de6fdcdc7f4ad649a7529bf91b3c3b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ws2_32

WSCInstallProvider

Sections

CODE
Size: 85KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE