f9a77e0000d67bc1d31c3911b54fbdbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9a77e0000d67bc1d31c3911b54fbdbd_JaffaCakes118
Size

350KB
MD5

f9a77e0000d67bc1d31c3911b54fbdbd
SHA1

3b54debef06f1f7e327611af03533191772f6985
SHA256

98b90a2d274f01a2a3cdb31fb0af28a68183e1d6c34d3a61a5992b5fd301089f
SHA512

d67c7540378c9e1e998faee715fb63b3a37d7f9eea718958d4b9a8303ddae89f4471c737b72cf03355c932fce9c830f05a42c1242fcc70835f59f973db2e357a
SSDEEP

6144:2s/g2TAPhNPGOWUWqvt7+eEWRGj5m4JMAXk9Q/Q1bpOxyJBUrZrXlm:2gTeh5GrUWqvDY5wAXMQubpOOIXlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9a77e0000d67bc1d31c3911b54fbdbd_JaffaCakes118

Files

f9a77e0000d67bc1d31c3911b54fbdbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a28bab276cc4d273374549e0e8f6bd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

ChangeServiceConfigA

ole32

CoInitialize

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 342KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE