0c940f24a3dcd52ae103831fd4ed31a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c940f24a3dcd52ae103831fd4ed31a3_JaffaCakes118
Size

118KB
MD5

0c940f24a3dcd52ae103831fd4ed31a3
SHA1

c830a802302b87cbf4891fa65f50b7d2091172a5
SHA256

a887faa5aa5baac52f2e22f0b5b2f5a6dade234ebec92d6ba0330508c0e3807c
SHA512

791aa2245af83f2f171aaa4829742180c9f8d39f22ccc904520fc0748636a45839f11cdf735264f38d1d1112a87b6c272b9217e7aa6cc304e82e94398970f02d
SSDEEP

3072:j0ATQv7MAiPDorOXBXp55H29Pk2GR6PgNt:j0AEv7FIj/H25k6PgN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c940f24a3dcd52ae103831fd4ed31a3_JaffaCakes118

Files

0c940f24a3dcd52ae103831fd4ed31a3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d975e67c56935cbdd8d15c60c37c5eb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

SetTextColor

winmm

waveOutGetPosition

Sections

CODE
Size: 110KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE