3829dc67a6d82d92de02a661246bb237_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3829dc67a6d82d92de02a661246bb237_JaffaCakes118
Size

46KB
MD5

3829dc67a6d82d92de02a661246bb237
SHA1

c72d7637d64d746372e615c662825165a3d9859f
SHA256

6a64fc2a9492226b99b4fb807e6099b2b2201b53248bf36c2276abc47a636290
SHA512

4bb123fc64181b26ee61d21573f54c0b7a0278a1c07110d57d764062719771cfda767827c9cba235cc33df91baef7bebf21e94ed7d0d3c10023cea1df56b1059
SSDEEP

768:nQrs/Y7A4nqqTj6ux+doP9DFtfiacDL3WKRScphAwQ4RvY5cKt6PHcRkbr6oF8M/:nQrs/YbnqcodoPNfnsGKkcIN4Rwdt6Pb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3829dc67a6d82d92de02a661246bb237_JaffaCakes118

Files

3829dc67a6d82d92de02a661246bb237_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 41KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE