f5a2cf63cb50fedc9d24bf0da01713b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5a2cf63cb50fedc9d24bf0da01713b0_JaffaCakes118
Size

940KB
MD5

f5a2cf63cb50fedc9d24bf0da01713b0
SHA1

f7c78be87eb171a2fa869e34c590a9035734dce1
SHA256

b3a5d557dc109f7bb014ad2f15f88437fc31952d30f8dd0c4b02da781f9c50ea
SHA512

2913e3ab6d177b116a2f5a2eff10e8188557d6e16c6eed3e48bce4c08e8ae50afc5b7d4e7a6c209a9f3f8213196b3ff81d6d3b44bfe7b8a5a17b8a71239b2edb
SSDEEP

24576:d0SdWgSJAezhBGgt2E843HFvJxXQRz/c8Dl:d0SdWvA8hEgtW8HFvJxXQ5Fp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a2cf63cb50fedc9d24bf0da01713b0_JaffaCakes118

Files

f5a2cf63cb50fedc9d24bf0da01713b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac766a260f1909096ca3ef8a8b15c6a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ExtractIconA

wininet

FindNextUrlCacheEntryA

Sections

CODE
Size: 928KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE