fc1b3e14131267e72e57617deeef953a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc1b3e14131267e72e57617deeef953a_JaffaCakes118
Size

173KB
MD5

fc1b3e14131267e72e57617deeef953a
SHA1

ba8ca70030f099fc617ae6f4b0dc41d7c05bf623
SHA256

400b8b53336e8d52147b23664259a42a1c4c952671fe4e0bd8bb2f7b3de636dd
SHA512

bbc270328d86c489bc5aeba14efb7852fd03bfe17630ea6cbc435f9b1e22265c1c1d9f6faba6c06b114bcf32690cf8f94e30f535181f02d03d1d8e4bf31bd814
SSDEEP

3072:eTFc2QhbavRJzqgsMIL4bymxSa2k+OKGI/TbDIKaT6ket+/9wD6p7yvJIL5EuJQ8:iFcfNav+g2c2MKFLAKa0UOveuv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc1b3e14131267e72e57617deeef953a_JaffaCakes118

Files

fc1b3e14131267e72e57617deeef953a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d853e3325501217158149a6b29dec7b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleSave
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

winmm

timeGetTime
timeSetEvent

newdev

UpdateDriverForPlugAndPlayDevicesW

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCPInfo
LoadLibraryA
InitializeCriticalSection
LocalAlloc
LocalFree
GetSystemInfo
LCMapStringA
EnumResourceTypesA
LCMapStringW
GetLongPathNameA
GetProcAddress
LeaveCriticalSection
GetModuleHandleA
GetLastError
SetStdHandle
GetStringTypeA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ