feabeffa26f20748ca9b1c02eb0e65b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feabeffa26f20748ca9b1c02eb0e65b8_JaffaCakes118
Size

484KB
MD5

feabeffa26f20748ca9b1c02eb0e65b8
SHA1

b70a6331654f97a1135721456ad4b1325d54197f
SHA256

aff90f531d51e0b4c7f1ea3bc86d4ffa99147a145c13b4133faf39e58225943f
SHA512

0ac8add848e74631d3461878f73524370d5ee673f9c59d16d4daaa828cd22f9bee9e7382993d783fbf47e4f05c4655db5f7f200ff0a4ee24d12268856f4d4778
SSDEEP

3072:AkdQ1CnA/W1fOJK/RsMh9D1453kub6dtUJIuTI0IqjB:SCA/W1fV/RDwLbe2vtIqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feabeffa26f20748ca9b1c02eb0e65b8_JaffaCakes118

Files

feabeffa26f20748ca9b1c02eb0e65b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

884a9734109037ff1d9cc912432bd46e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetReadFile

winmm

PlaySoundW

Sections

CODE
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE