f62cef3fe169888ffbc8febc897b9227_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f62cef3fe169888ffbc8febc897b9227_JaffaCakes118
Size

1.6MB
MD5

f62cef3fe169888ffbc8febc897b9227
SHA1

c27a1ee837caa95dfe17b9e331138ae327c6a263
SHA256

51726fa71f95e0f713c94de204ad5d52ba242539cebaa26e45e65aa35a133aaf
SHA512

4d0109e4831adb603758e3d7c5b8bb3e20101376207532b58827baa9f6c63b285135980e3a0e1f8977658abd91dedfd80dec7ec89315ea901f1f3b662d184363
SSDEEP

49152:TUrQiLhE537hAX5dT2u3RPEMaR0txlGv6hrFFbo66p:coh6lmH+lwuFax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f62cef3fe169888ffbc8febc897b9227_JaffaCakes118

Files

f62cef3fe169888ffbc8febc897b9227_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbea47c0cd6af6c443ef1ef9e0fd8223

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

CODE
Size: 1.6MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE