f50caef7fe711fdda1879aeecadeb050_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f50caef7fe711fdda1879aeecadeb050_JaffaCakes118
Size

322KB
MD5

f50caef7fe711fdda1879aeecadeb050
SHA1

cbccc16b5a758af42eb96a889cf449f801517bf3
SHA256

ddb03a379cb9cd849d098cbc0c87e00597dfb9f33fbbfba79cd14d88206309f6
SHA512

27167a58c0165722d250e2dc9510c9c60e7143b50712cc5754a55f0b52c69019a9ebc8cb15b975448485e7c523d65b220c8dbaa9acce979069e661ee29494744
SSDEEP

6144:6ogeX5EIlakBEL0qtlWUme0aN2b9+6IY0zpyR04pygw9xEH7KAz:6jOflBGL0AWUEmJBY2/MmyW8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f50caef7fe711fdda1879aeecadeb050_JaffaCakes118

Files

f50caef7fe711fdda1879aeecadeb050_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 312KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE