f0a06559a6de88f696f732c8bacb61c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0a06559a6de88f696f732c8bacb61c1_JaffaCakes118
Size

31KB
MD5

f0a06559a6de88f696f732c8bacb61c1
SHA1

11ce178ec9e1326b2df04932b50e84e42db4fbd5
SHA256

178242d00fe475ef0d7fbe60d3a6afffed13299d5407767a4b24115ff1132ff9
SHA512

a918b224d0fca027c25f27a32ce8700a0c75a62a84e58f960170e93a93329693eaabe3b8b9a977cfc3759f0477c9a92eca5a2997766f852cbf72ecf286ce97c6
SSDEEP

768:F+NkbThqSTFcBnEN2pV9Rw75Mnhz8Exs9:MN6FT0wO9mKh4Exs9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a06559a6de88f696f732c8bacb61c1_JaffaCakes118

Files

f0a06559a6de88f696f732c8bacb61c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bcff2c39063e0b8c644986bb71bb1b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID
CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

.text
Size: 31KB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE