0df813ec6f62716a92d841c75a04fc2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0df813ec6f62716a92d841c75a04fc2b_JaffaCakes118
Size

79KB
MD5

0df813ec6f62716a92d841c75a04fc2b
SHA1

33aaeca36d2bc5036842bb1f28684626375cf227
SHA256

6623794b2ca30c2e883a48c8997b077b871e8be910fbe749a1430b364c1ba4af
SHA512

68514e58905cabaffe799bfb1aa551b7d70e0501a129a80f8c020cf94624745a4b7518e4496fce64ef99800384c4d6063db2edae165670157ef4a29ff40c1212
SSDEEP

1536:R1L5+h66TQTBaFIkkKpao+s9sbVYWe/tlsBvxKJhUtag6L3:3Ln6asssubVY/PEvxKJqtF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df813ec6f62716a92d841c75a04fc2b_JaffaCakes118

Files

0df813ec6f62716a92d841c75a04fc2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935fca4d18d739f0316205d6b9e8907e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteExA

wsock32

WSACleanup

netapi32

Netbios

Sections

CODE
Size: 74KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE