1812195768a3704f720d4629e2013b2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1812195768a3704f720d4629e2013b2f_JaffaCakes118
Size

236KB
MD5

1812195768a3704f720d4629e2013b2f
SHA1

1edffe854621fb25292c005bf5264aa26e00f4f0
SHA256

d7301a3d50d074520e14fd6e74e587ba9efbaa1987293f5903fb8d34783c3892
SHA512

5ae292b71a4a5f0b9555ca89f756572348ee3be45aaf9c62c9b83dfb8b625d9753f578f76f8c69c819ed44b1b95645b61feca73104360d04c80708cf83a2bb81
SSDEEP

3072:kQ5lTbxUNkBvKEpEzEkXocE7sWSL+Fsjejjv1x2KCq4MUR5RaxX:FL/WkBvKOEjhEIWSdi71x2xqTUvRal

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1812195768a3704f720d4629e2013b2f_JaffaCakes118

Files

1812195768a3704f720d4629e2013b2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

916a49bc66ca9650cdec862aa9301c25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCloseKey

msvcrt

free

oleaut32

GetErrorInfo

shell32

ShellExecuteA

user32

wsprintfA

ws2_32

bind

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE