c77c2fc41a6ad4ef73aff9e282e0537a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c77c2fc41a6ad4ef73aff9e282e0537a_JaffaCakes118
Size

47KB
MD5

c77c2fc41a6ad4ef73aff9e282e0537a
SHA1

fa6a846cab4734b7698409b1a5369bb395387151
SHA256

ca12e55f94328c90d85d0106d3fbaf02566ee60b6e60e4d33c5c1ceab5b32e32
SHA512

39bbc7bdb2b11a632937aaec4b2bc38f6aaf0865e7a99d548f0977a9fbbb5d3051aa81ea449551af2b4bc30183efe0093b71eda703c3ce50261691d88f866b1b
SSDEEP

768:FL9ONDgLPBTPrcQmUxh48tHOL4G1Pl6YjDbDQnBGs5EThuT5zq+gK2nH0RjoxocM:TEDGrC8HBG1PV0BGsvNzleH0ueG2nZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c77c2fc41a6ad4ef73aff9e282e0537a_JaffaCakes118

Files

c77c2fc41a6ad4ef73aff9e282e0537a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 42KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE