f9785f310c5fd6827336a200675d8911_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9785f310c5fd6827336a200675d8911_JaffaCakes118
Size

289KB
MD5

f9785f310c5fd6827336a200675d8911
SHA1

8b8855e3b7f4fb33a107df198029f11ca6c5c3f6
SHA256

e8c5a588c99f66e19638c168a562d2109c0c54918489c24971f2a35b2acdb51d
SHA512

8266a69db421dae6b095af9d291b26c5325a45fa5f9a31b6a9472fd9b489795ace49b852a752d52f7750a8d1dc94e8c69449afcdcd3a5a0326be53d69adecf28
SSDEEP

6144:6qaVInz3tKeB1z+bEZ8dXPi92hoJXrCWivMohs5u7CfziOZ:8Inz3QeBJ+DdXPSUme7rAu7O5Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9785f310c5fd6827336a200675d8911_JaffaCakes118

Files

f9785f310c5fd6827336a200675d8911_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 280KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE