fe135ad36468057c179f1d3805965bf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe135ad36468057c179f1d3805965bf5_JaffaCakes118
Size

16KB
MD5

fe135ad36468057c179f1d3805965bf5
SHA1

96c4cccf18357946b2085e2412f484f39bb37c08
SHA256

822dbc9761e67d84f950a276d9aa4956b1a5b674630cf0d7d88b6631dde57f39
SHA512

1c7cb151c1c13c5ed5f434453259dcd4bad01a421bde82379d0842587c785323f756ceb7bb67d3e761a85c516376d7e42d008bdfe416dd91b56539ae1f9bad2b
SSDEEP

48:audB+F5hW5mrR8mxwCPN3IlM6Pc2cam0VAaP4oyl1VdA8:RdIqmrRNNUk0V/P4oynVdV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe135ad36468057c179f1d3805965bf5_JaffaCakes118

Files

fe135ad36468057c179f1d3805965bf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1173a1dafd2530d7479f2e8f3523c77d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
DeleteFileA
GetTempPathA

oleaut32

SysAllocStringLen
SysFreeString

urlmon

URLDownloadToFileA

msvcrt

_controlfp
_except_handler3
__set_app_type
fclose
fopen
sprintf
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 4KB - Virtual size: 812B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE