d0f8432db763ea89659ada04761fc45f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0f8432db763ea89659ada04761fc45f_JaffaCakes118
Size

53KB
MD5

d0f8432db763ea89659ada04761fc45f
SHA1

4907d0edeb2703606fc1ca6d7f74bf166b35303d
SHA256

d4325bbdd1b328fd201397ac389b7147a85f0bf667e8e89bab916ff5cf536f1b
SHA512

d2c3148854394208f8f4462a4b9bc9343f6afc92e8714c07e9d9f8da07c21ed01cfafafdd892932507e20ce09fddaf0f2da25ef2e27e7ded50c18b1bb90bbd99
SSDEEP

1536:nDVvhdTByoBIOQR3dWcXpzQNcyzBZcqFBqjjiVSfCb:nBpdVyUITZ5UMqFBKjinb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0f8432db763ea89659ada04761fc45f_JaffaCakes118

Files

d0f8432db763ea89659ada04761fc45f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4fa3b11fa3213d1363897cebca4a788

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

ole32

CoTaskMemFree

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 48KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE