3e9e42303d8a9e61f6216fb585486248_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e9e42303d8a9e61f6216fb585486248_JaffaCakes118
Size

29KB
MD5

3e9e42303d8a9e61f6216fb585486248
SHA1

8a152b1a70be96f1ae8407dcce8ceafcc594115f
SHA256

387474eea1b865da485bceb48a96945a4b355c59ea7e8139b1b82c6ba2e6fbb7
SHA512

43b4103a14f7feae0b68125cb3c9ac9f555a7672dbc3ce94e96e7574baef60c51cf61adbfc548d6b1043ee657d60414f6ebb55e819f4e3a06d992fe37d75a859
SSDEEP

768:ovhwqW//x7DtQ/qknoEF/d5qqyFDoDv/KkHy:ov6j3xmoEBdIqyFDyvSkS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e9e42303d8a9e61f6216fb585486248_JaffaCakes118

Files

3e9e42303d8a9e61f6216fb585486248_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c42bf4107481f4960a34f220d5944482

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteA

Sections

CODE
Size: 21KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE