f13f14d334c2636100132244cf02675e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f13f14d334c2636100132244cf02675e_JaffaCakes118
Size

196KB
MD5

f13f14d334c2636100132244cf02675e
SHA1

7c352472e4a2d438874760ca609c5a5b6235c370
SHA256

800ba8c498f3a2664a28aac2f76393871539cec8673252e4583026f8da681169
SHA512

3006963a8d1daf229b6004371fcd61a20bd0c70ef8b798491c5bc5ee5850c2afe6b0e5ac43e7ddfddbbd0ff6795cbd8a6e44fb906cae8b4bea227eed50d782c5
SSDEEP

3072:2V4ZcJK/0R+7GWKOL+iX4aRZjbAyQkUBLytxH4oSfcJ+m4emCUg7EXu:c4ZcJK7xK2XdbwyQBmtp4oLn4+FEXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f13f14d334c2636100132244cf02675e_JaffaCakes118

Files

f13f14d334c2636100132244cf02675e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8e574f9b71b69e5909eb0c80be1aa37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 42KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE