fe92518b401d7fcb4e616ee401b6100f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe92518b401d7fcb4e616ee401b6100f_JaffaCakes118
Size

3.4MB
MD5

fe92518b401d7fcb4e616ee401b6100f
SHA1

bf68bb8e5e456cbce32b0ef65e730799151cc89c
SHA256

bf704fc67c73d52c77fab42de8fc81036e4e34a72138565781b0ec648770869a
SHA512

34c93b70a5e275a214b14c8e80f3d0928ede9e3148b448dd96958d895445f8ca474bb8d07c2ece330fbdf0eafb04815117a50ff32a43d289f991a396a88a17db
SSDEEP

49152:aK6qDFWQ/ASZ/THP6ntHfyC7Jp7fIHcftNiNe3sdGPstE4gX6oB6hESdDcvHwOh5:ac5jAi7v6tHfNfI4ioaGkPviQ9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe92518b401d7fcb4e616ee401b6100f_JaffaCakes118

Files

fe92518b401d7fcb4e616ee401b6100f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfac1184cb3a165b0ce40984d578c836

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

Sections

CODE
Size: 3.4MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE