f5bc99f133b726ae375b906b169ce155_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5bc99f133b726ae375b906b169ce155_JaffaCakes118
Size

48KB
MD5

f5bc99f133b726ae375b906b169ce155
SHA1

9c9805eeeca73b9a316966d7819060da5685dfe0
SHA256

713dabff5e8f49916002922900d5999345baf76cbd9d9440704b346fbcbdf72e
SHA512

b73bfa222ab1503778632b9006b30500e9a05c0a87f7076d052392c9c43e53cf577e8fce10aae8e91b41254910938df744c2046adab5d58f24f464c8e03172fa
SSDEEP

1536:Kox768RPlyoeSyN6/J86HRwwHJBpetl5A00WPN:p7Lf3yN6/J4SMtl5A6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5bc99f133b726ae375b906b169ce155_JaffaCakes118

Files

f5bc99f133b726ae375b906b169ce155_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 43KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE