bb3d6583f7e242e74fbf8c101415ffbc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb3d6583f7e242e74fbf8c101415ffbc_JaffaCakes118
Size

101KB
MD5

bb3d6583f7e242e74fbf8c101415ffbc
SHA1

48316376ab8b18aa54ec043e06aa230a2e7af304
SHA256

a48a06e567bae3811b0cbb22e1c80a9dc82cd1b6cca84a356a3a7486cd1c1c37
SHA512

bf1f0abce321d30282d6be79b80198d0f497a8d3454e50933c7c012a281c6d234f5de32b0e38a830d02a1f3619e510963ea7c7c34c8755411b3e1fd102fa3c09
SSDEEP

3072:fpAWH/PB/WGWUljhx0ujgwv+zYqBaIj/p0:B/PRNfj6kqBaIj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb3d6583f7e242e74fbf8c101415ffbc_JaffaCakes118

Files

bb3d6583f7e242e74fbf8c101415ffbc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c42bf4107481f4960a34f220d5944482

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteA

Sections

CODE
Size: 85KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE