c9728c5513ecc7669b9fe1c0e2b83274_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9728c5513ecc7669b9fe1c0e2b83274_JaffaCakes118
Size

82KB
MD5

c9728c5513ecc7669b9fe1c0e2b83274
SHA1

4dc9481750017d823094da47e4dc3a00106218e1
SHA256

a9cfb3d2b6d5f4cbeb12e62fafd36972d8317ef55bae65eb4f8c4e57281917fd
SHA512

1d75c2230cb61a7aaaba3196e3e2429bb311f4ac8a09754ae7bb2a0b8fd50c77b538e443d44dde952f2493680188209f9389faf16d42ca91d70a2c28c288e20c
SSDEEP

1536:J1L5+h66TQTBaFIkkKpao+s9sbVYWe/tlsBvzKJhUTJ6ZI0epTPZn:/Ln6asssubVY/PEvzKJqTJ6Zv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9728c5513ecc7669b9fe1c0e2b83274_JaffaCakes118

Files

c9728c5513ecc7669b9fe1c0e2b83274_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935fca4d18d739f0316205d6b9e8907e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteExA

wsock32

WSACleanup

netapi32

Netbios

Sections

CODE
Size: 74KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE