bc55d28a71859a9c108b752e0422c6a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc55d28a71859a9c108b752e0422c6a2_JaffaCakes118
Size

55KB
MD5

bc55d28a71859a9c108b752e0422c6a2
SHA1

c843677a17b0f7c7a2aab4b280faecce7e561066
SHA256

35d50e9cb51fe4d33e39e86e440f2cb7bd88d65001d8aa4e404637101b16e4d9
SHA512

80e1e0f7cbea6afedb5f4a135abaadf19e2717c5d29844da12a4fce9a1e88839ecededd36a19de2217ee5585bb094bd11d0ecb6bd2d9a0af72da866f3ff090c9
SSDEEP

1536:slyQh66ffTkO2UNCwIAPyGIdd5LqcgR/pluThP06qN:O16gfVNCVN/JZgR/SF86E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc55d28a71859a9c108b752e0422c6a2_JaffaCakes118

Files

bc55d28a71859a9c108b752e0422c6a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

864669228b9d0fcbd7920bc5eb3949d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

wininet

InternetSetOptionA

Sections

.text
Size: 49KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE