f3818e8a4566b7d09a2c19743ee300b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3818e8a4566b7d09a2c19743ee300b7_JaffaCakes118
Size

170KB
MD5

f3818e8a4566b7d09a2c19743ee300b7
SHA1

f278b188286494fb6db2b4b7cefc1b2bbc1e3fe1
SHA256

417447ebc0a95aa33743d2f937e7a7ce8817ad1ed8e1a219a5c7593cdea7030c
SHA512

31439c058605dbd49db688066092f2364d84e7a01c753376fb1b015846caf98643523c4155c7cdcf03e154e0e8e77c873c4d47e3477f5a974e326dc56578fef9
SSDEEP

3072:hFvZmc2ElAO24QCfAnW/OakoTkwXcZpcEd1jc662Pck6NJWYWMJgYm16Hn:hxd2ElAb4Qw/OakoQJcEkMkNDWuFLH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3818e8a4566b7d09a2c19743ee300b7_JaffaCakes118

Files

f3818e8a4566b7d09a2c19743ee300b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6ced02617181defbf7e17c76a9427b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE