cfca645ab0738c068b2169d36022a3c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfca645ab0738c068b2169d36022a3c7_JaffaCakes118
Size

34KB
MD5

cfca645ab0738c068b2169d36022a3c7
SHA1

0b1b8d76672c7f49f49292c94c026bb7539fe1e9
SHA256

7ce3f0de345f5da0b4a223b36f305318331d8422d42c6f751d9aa9459a7436cd
SHA512

c3112a889ad6afab33d6681560e531525f0e0f38e9317b70b5a7dd1baa4a274bd3db76f356e705d6dddc01bff810c4675f7bda7cdbb9e68059e2a7acacd29969
SSDEEP

768:UFO2A7dQ0GE3rH9zWlhCGxOwezeFc7oDRzAz420cBLK9bYmrK4qyJV6Zv:U5ARvbE9eUL9sz5LZPmrNFv6Zv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfca645ab0738c068b2169d36022a3c7_JaffaCakes118

Files

cfca645ab0738c068b2169d36022a3c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d43cd5e399f31c49a6f934c29809b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

Sections

.text
Size: 28KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE