fe34bc0992b620156170f88303746118_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe34bc0992b620156170f88303746118_JaffaCakes118
Size

3.7MB
MD5

fe34bc0992b620156170f88303746118
SHA1

54d3f50bca327a5a2b508b6a855ce7847a395c2b
SHA256

f244b7610ad2156ce1b229dbfb18dfd19a443aff22e59c8fda5eed53eed9053e
SHA512

7315766bad670b49d7b5179e9994fad76b4cb1b7d60e5746c6167c172e9012e50450ea0ff465c63d7a505cbc27d77a351d8d125d2c81723da230da19098615a8
SSDEEP

49152:YdclExqlSHX/DBX0mjIvH4Ybs1KwkY4Phy6Jwc6Rq0rJtUc2C0HN7hqybezTyxrW:acqgIHbBX0XvHbCAv08wjkGVA+ir4k4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe34bc0992b620156170f88303746118_JaffaCakes118

Files

fe34bc0992b620156170f88303746118_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c15f13dcaadaaa55152434c9f80d048

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

winmm

timeGetTime

Sections

.text
Size: 21KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE