451ca98df80f7bb323c78e402ca5b73a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

451ca98df80f7bb323c78e402ca5b73a_JaffaCakes118
Size

83KB
MD5

451ca98df80f7bb323c78e402ca5b73a
SHA1

786a80bda3e58371c515407088a4715401f2967b
SHA256

ce1cb8fab61c54368a58824438bca8ec2d089f6e1dac77e69afe4676af27f8ba
SHA512

8cfb272e6443f2f7cd9063d5a8844952cfe5fbbee37e829fcdb79f38edfe1dc457bcd5cb1af0110f0787dda96dc12376f9f52a523f9ee068379ff74a01b6eebb
SSDEEP

1536:EVHk2Qu0lGjeDJ0xj9vXlHAeR6VjhlECgi28cPSMifGEcLi0Mb8yeuZtmRt:8uu0Uje2j9v1g1jjP28mqGj+0Mb8EAt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
451ca98df80f7bb323c78e402ca5b73a_JaffaCakes118

Files

451ca98df80f7bb323c78e402ca5b73a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c42bf4107481f4960a34f220d5944482

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteA

Sections

CODE
Size: 77KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE