f6a6a95cb4b70890c740a21c8772c115_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6a6a95cb4b70890c740a21c8772c115_JaffaCakes118
Size

161KB
MD5

f6a6a95cb4b70890c740a21c8772c115
SHA1

3e34719acc3b6f9fac48aa4db747d175f2cbdab0
SHA256

5b2e071278143dbf7a2a6b7d526d82f87d79f9327fc63ffd4616e938511814f2
SHA512

6381af719031bd1617dacb6b5d4e4a0821943a8a477e52c325533d23137fd3ffda60792c5681ef5a41dea557d099a60c299256facd03358cb3fab8aa467657ef
SSDEEP

3072:COpqYDwCigJuEEIS9+Ds2mBeQvHUtEVrQzZEfpaBRAM32XH:CO4wuEW0XQv0kQzmpa/ATXH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6a6a95cb4b70890c740a21c8772c115_JaffaCakes118

Files

f6a6a95cb4b70890c740a21c8772c115_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 155KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE