fde90b3f0d8897274af8a5d5895be581_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fde90b3f0d8897274af8a5d5895be581_JaffaCakes118
Size

162KB
MD5

fde90b3f0d8897274af8a5d5895be581
SHA1

39408c702367aaa67fe6bb6f8b1d04e55da2f972
SHA256

167a75abc87f934d6741f48edcb0f56b09f58c8e75f4460915bc2e4350123629
SHA512

885cdb3ba38f3ba83765d24dd72e83a018bd2f0f7123208bc873c4f6f0fb33616dbb1078ec61da67193c4355c2131410d9ed91da72bed6804b4e1b9baad07e2e
SSDEEP

3072:WXsLXP6nijWUxPmYF7nCNxc2Kv0lthxnLLi6Hz41YE:WQf6nFkVJCNiv0ddi/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fde90b3f0d8897274af8a5d5895be581_JaffaCakes118

Files

fde90b3f0d8897274af8a5d5895be581_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 137KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE