55601b44b191f8cedabec1beb520203c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55601b44b191f8cedabec1beb520203c_JaffaCakes118
Size

27KB
MD5

55601b44b191f8cedabec1beb520203c
SHA1

cf4df820f7e6433b080589774f729a27fc7c7c2c
SHA256

0622788bce56254a99465901fd8f10cc3dd11d5a18f72d6d2c90339af08da77e
SHA512

f8a0e0996fe093c3e7e80bd3404ab222b59e702cb082f9e11768d5179ccf70ec8ca140677ee667cb36ca4dc15b197d46d5957db5b68db70565a863894cd1f6e6
SSDEEP

384:huY6oSavXnYyk298707cMBOZoS2DkO4SKjhczQMPa9Qq2TcTQPN93CQ9:h5Sagyk32OZp2DkO4SKjGzQMy9vPTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55601b44b191f8cedabec1beb520203c_JaffaCakes118

Files

55601b44b191f8cedabec1beb520203c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

469e3fc91d03d96c1f98b27426cba763

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

FindNextUrlCacheEntryA

shell32

ShellExecuteA

netapi32

Netbios

Sections

CODE
Size: 21KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE