d34f4f5161f29a7ace50678506ab6127_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d34f4f5161f29a7ace50678506ab6127_JaffaCakes118
Size

90KB
MD5

d34f4f5161f29a7ace50678506ab6127
SHA1

4a998a131fc79371de03becfc8d244d468e4b99e
SHA256

583a003b36af0c62bc4ceabd2c71d5bceeeb2b029ee0d4e7098a59ceab8f5015
SHA512

1351ad9c10df258d4a3de04fd05a9c3d8e732911378b7c53819591e755bc0da8646e9d1a906a8212936f622d96021264f7e1dd183933cc1175c2a284338214ab
SSDEEP

1536:RT1hDA72ifnSgQSbQHzLUQGRY35Hwd0cs2uvuQa7JZL7Pj+BxDXfdp2c:RT1Ri2ifQSbEY/RYpQWM7n7Pj+7lp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d34f4f5161f29a7ace50678506ab6127_JaffaCakes118

Files

d34f4f5161f29a7ace50678506ab6127_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de6fdcdc7f4ad649a7529bf91b3c3b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ws2_32

WSCInstallProvider

Sections

CODE
Size: 85KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE