fc123a2f4b70afdbc38d92df48f004a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc123a2f4b70afdbc38d92df48f004a4_JaffaCakes118
Size

157KB
MD5

fc123a2f4b70afdbc38d92df48f004a4
SHA1

ccbd0f8368207385cdb186648b3f5808f771aa2e
SHA256

b3072f823622a61c1d5f95ca7a9bb1da5f86202f75387aedbd26581b0ba7a68e
SHA512

9c39ff975df5acf20a6cb0569fb95ea0fbaf0605e0a17a9e87564308bfd5245de4eba763a538ef5d4124e6482f3c5732286986a561929f6281dd3f4147ee81ac
SSDEEP

3072:hY8wCdaayuYQeazJwqs0lE8S2oxJVH/I+GS5Egih3:hYLhavYTqvEW6JVfI+/5Egit

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc123a2f4b70afdbc38d92df48f004a4_JaffaCakes118

Files

fc123a2f4b70afdbc38d92df48f004a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbbc81631ebaa0a7d1f8fda3d6652c3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

URLDownloadToFileA

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 132KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE