cf61a18451ae2e486a28c28019cc49ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf61a18451ae2e486a28c28019cc49ae_JaffaCakes118
Size

295KB
MD5

cf61a18451ae2e486a28c28019cc49ae
SHA1

dfdda0a273eb2eed93516f9a073f49c64ee7c3ee
SHA256

8d258f35d4d39380e40b1c49f5db443ca3dc28c736a0472bbf5d4f74f917573a
SHA512

4f018dfba8a53a785b5524a226b2d3f65652ea0e8a0e1807a46dbebcb33ab0963e04bcb6a11e36cf3c5cf438f5973afe0aca74f72fb3db061783f2bdeaa477be
SSDEEP

6144:xRVgKyCc3uPRXMzC8DUm0622XnYUhwwmwg4NMNuLlByfZLtR2:xRVgoO3tqIPmtmMyS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf61a18451ae2e486a28c28019cc49ae_JaffaCakes118

Files

cf61a18451ae2e486a28c28019cc49ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75ab7960933c0e15a6898fbf530382f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExA

oleaut32

SysFreeString

user32

MessageBoxA

Sections

CODE
Size: 286KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE