edc7f141430494237fbb2f131b0a4de6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edc7f141430494237fbb2f131b0a4de6_JaffaCakes118
Size

446KB
MD5

edc7f141430494237fbb2f131b0a4de6
SHA1

9cbbb753b138a989117deeac4875f250496084e3
SHA256

b182d77d38ff98c9221db49789d5ca9ab46b32603fe059b2965d6317c3c38ae6
SHA512

5b6b926af6e414ea61100c242b7352c98fad8ba6b58eb1272ff7ed50d2f402c1f300f04ec8d7d025fbdead950500b6576c7e5fa5a818595ea61e99ecdc25f8d5
SSDEEP

12288:QZrRE1GOxYZ0lFVBqAY+zMUp8tVay+Azp0Q8twX:QzE8tZGCcLp8zaHAzp0QN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edc7f141430494237fbb2f131b0a4de6_JaffaCakes118

Files

edc7f141430494237fbb2f131b0a4de6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b70b652b127b6c79e1a9b852165e2e12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyA
Sleep

oleaut32

SysFreeString
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegQueryValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CoTaskMemFree

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE