d4710509db5dd47653c1ad3e955e4b75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4710509db5dd47653c1ad3e955e4b75_JaffaCakes118
Size

23KB
MD5

d4710509db5dd47653c1ad3e955e4b75
SHA1

20d84235ab03e70affe65455c4e7763653815cf9
SHA256

2d4048185ebacd699fa9e56ece002788eb9c23a4ccc2b5ccea2690ac244d531b
SHA512

cff3abdd1c6000eb2c7a5ae329b8bf90038e55614ea97e698dc668865262dd09b625213096286f19c6231e657f768e08b272d9fc8839a5b100d55c4375d2189f
SSDEEP

384:SAapCHY8OH7iZmpfnXKMFqV1SgryQGHq63/atso7EnCLe0mzII5SsGqLQWxWLJx:SnpC437ampfXKMFqbSgryQmq63hYezl0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4710509db5dd47653c1ad3e955e4b75_JaffaCakes118

Files

d4710509db5dd47653c1ad3e955e4b75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37f3cd05a4ed0aa309b2569719cfa873

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

Sections

CODE
Size: 19KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE