dc50efff91d40071e26ffb7491605844_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc50efff91d40071e26ffb7491605844_JaffaCakes118
Size

279KB
MD5

dc50efff91d40071e26ffb7491605844
SHA1

7f565f4edb087f14852ebfb697daf7a7b3766565
SHA256

a5edeb3512a3d9cad63a6ada9266e2638dc9f5db18801f90e1ccf733515ca685
SHA512

b8901e6cb24d0aa1b08daa7415386015a80c6754a37c961e92e6f4c0c1ef90f391df9734f850254a842aaa9690ae273973c58dcd18849345c60e8ab5c8f4150d
SSDEEP

6144:HfMH+yONBB6VD9WMkZPQpK2Vxls0U3C4lEMjXFjaBJyepCIyscYcOWvDSloXTC:Hf19+WMkNoVxHU3zqMzFSyepXpFWv2SG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc50efff91d40071e26ffb7491605844_JaffaCakes118

Files

dc50efff91d40071e26ffb7491605844_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 272KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE