fe157cd8891cebf809d58bc88735e44f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe157cd8891cebf809d58bc88735e44f_JaffaCakes118
Size

200KB
MD5

fe157cd8891cebf809d58bc88735e44f
SHA1

db1f3ab56b3abe335bf1e86a69ee91cbffac55c9
SHA256

53c1865536d2a388d502af918c7966ea71d3dc31ee8cd79975c44ca812479f67
SHA512

a4c32dce37f78000f9101c66939177f9c477e05f6618e4806a15ffa87a546d0055c3bf82d79449d9f2377df9427c385dee0c0b94644be507932915802f8bdca8
SSDEEP

6144:cKkBzKJ5to5P64MgtNB2s1H+5zeTFckJqxCnOJ:cK+zKpgyoNBvcC0xC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe157cd8891cebf809d58bc88735e44f_JaffaCakes118

Files

fe157cd8891cebf809d58bc88735e44f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f15595fb48eeaab48efdde2cbe53de69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCloseKey

version

GetFileVersionInfoA

comctl32

ImageList_Add

gdi32

BitBlt

user32

ActivateKeyboardLayout

oleaut32

SafeArrayCreate

Sections

.text
Size: 191KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE