e965ab4f3b561ab4ef93583075b92b0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e965ab4f3b561ab4ef93583075b92b0a_JaffaCakes118
Size

169KB
MD5

e965ab4f3b561ab4ef93583075b92b0a
SHA1

4931bf717472d60e3d447b4c293ba8a83b695feb
SHA256

12f975846667431bb4daa90cf8566db3cf0931603fd01d35ad51e62537ef8438
SHA512

9b42e3dfb6a7f894b2eb72e59a7253b78f1886760d457b545212f12af3dd13611bb562b612660dfd5aaa0f5a830f586a3c396d9b9109265385f4f6d6c39bc302
SSDEEP

3072:+H1cvRqmJtAAd61km3xWF/PTmpflbbMjEmw9AksmXgebmWFL85FgM7YJZEp:+evjZd61kyWF/UZwjEzAknwYFACJZEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e965ab4f3b561ab4ef93583075b92b0a_JaffaCakes118

Files

e965ab4f3b561ab4ef93583075b92b0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e191b4d36b8dbf417d8814c239a87dfd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
PostMessageA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE