fd166720f75698b9dd9527177b9c17fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd166720f75698b9dd9527177b9c17fe_JaffaCakes118
Size

32KB
MD5

fd166720f75698b9dd9527177b9c17fe
SHA1

5babe962f668a4f88d82763ee35158baba0e8618
SHA256

e0782893d8ca68079b7008d7a0c84eaaff3d727629b589b6b1410db874f432d9
SHA512

dbe715dcb0ddacfb8fb58a7c3af83139dfcaf463c4a75867e3c229dbf8f2a2f7053d79cb8e97a813ba413d3f47a7dc03d0e41283d89e17d77fee66ca036ff747
SSDEEP

768:hl3eYC+k9HJcGqV+PCvWdFA6uJK3JWAEdUUK:TeYqHuG5qM2LJKIAERK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd166720f75698b9dd9527177b9c17fe_JaffaCakes118

Files

fd166720f75698b9dd9527177b9c17fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 17KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE