f04b8db2a89a0f21de135dc207e58a63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f04b8db2a89a0f21de135dc207e58a63_JaffaCakes118
Size

51KB
MD5

f04b8db2a89a0f21de135dc207e58a63
SHA1

0c4f1c1171dbba740e5ff98f19133bb6be338f27
SHA256

f47e2fb2b0719dde93578baeb1c0b2bb5591d2214974e86687af92cd2ca6bb72
SHA512

987b9fbfd696d612c255f8fc9be6e250b2a4b01c988a3b09cb699ef21e7e7d1e428fd16b1faba0d5ddeb4cd253ae303045be4bbaa3945706913bceb16b8169b7
SSDEEP

1536:tqDgwsbd0Kii1jyD9MF759SEgBxRqxoDu:t8gwsG+m9MF2EgBx6oDu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f04b8db2a89a0f21de135dc207e58a63_JaffaCakes118

Files

f04b8db2a89a0f21de135dc207e58a63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 46KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE