fb16ea8e77213463a182350d9bff530b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb16ea8e77213463a182350d9bff530b_JaffaCakes118
Size

150KB
MD5

fb16ea8e77213463a182350d9bff530b
SHA1

9d0c69540bc84d511e3534d59be353704ec4a6a6
SHA256

1471eef426cfd6582269dbb73c031ad176c7045ac9139fa9cd3d3cd449ee92a9
SHA512

7da46856366cbf6f81a2267e9bf8e9eef5efdded7bcfd315a09d0c1d7342e9aa42b67ea439f82c03b3cadcd979b67de8dcc5f87b9669e23a0cf77b2d266585dc
SSDEEP

3072:BcUuJl6swsPqJYyAOannfZI3HxjFYoUx6lQCmhDMqrNY3A3:2UWl6TsSqfZILYoUx6+Cs3xn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb16ea8e77213463a182350d9bff530b_JaffaCakes118

Files

fb16ea8e77213463a182350d9bff530b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f95c3d489bb12bcbac4bf2fe9e9a9ceb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 141KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE