552a9fa4b963013dd2d55ebd469c0600_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

552a9fa4b963013dd2d55ebd469c0600_JaffaCakes118
Size

70KB
MD5

552a9fa4b963013dd2d55ebd469c0600
SHA1

cf270b24642537026be175808b9effd6bd5da9d2
SHA256

a3cd28d9793c1cd63adf6becccb7d40a3c7a80152183d41f89a3927dde5ab2b4
SHA512

4932b1bea38b31019868fb29119315f7476ea7b6ba1a89de46f562c9176ed3d266bf78f9e50ccd2261ee94b604a6803a205a16e84457783bf9de691856f863a5
SSDEEP

1536:bkv9Gb3q6tAe2bWL4KMKGdOmVP31QnMIIw2aFgR5:bkv9GjT2byMGmVPlKMIIXaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
552a9fa4b963013dd2d55ebd469c0600_JaffaCakes118

Files

552a9fa4b963013dd2d55ebd469c0600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935fca4d18d739f0316205d6b9e8907e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteExA

wsock32

WSACleanup

netapi32

Netbios

Sections

CODE
Size: 65KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE