e7fb7ecabf4c18e0323b0104432af16c_JaffaCakes118 | Triage

Sharing

General

Target

e7fb7ecabf4c18e0323b0104432af16c_JaffaCakes118
Size

166KB
MD5

e7fb7ecabf4c18e0323b0104432af16c
SHA1

c2a8ddaefdfeed91e6dc210f717bdcbd4dae8e19
SHA256

5b27fde99bae12ef45e24a9ffcb672aed4c6cd884b1a022598ca3bfb73428fa6
SHA512

40ce42423a59d512891090d777c68a953b6fed653c3e9341f210533ab5561216d08ed29241c7b825d9c488d55f1777ae2de0af7f9846dd1f59c560a7583ed081
SSDEEP

3072:PDWTGzFv1wPOFBOYgHAS1ZoakkrXwF6xNkdyFinMlFgDqmTyZdaVWjnqNizM:zwPQng/kOXu6xNsyFinMsD3TucWjqNuM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7fb7ecabf4c18e0323b0104432af16c_JaffaCakes118

Files

e7fb7ecabf4c18e0323b0104432af16c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6e9f842ad3d764ea0e45106a86af42c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 21KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE