057ee14ed82569656b3f1b9f4e9c1cbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

057ee14ed82569656b3f1b9f4e9c1cbf_JaffaCakes118
Size

2.6MB
MD5

057ee14ed82569656b3f1b9f4e9c1cbf
SHA1

241ee4d9601dc133449627a00ef9b186e3a94acf
SHA256

89f99130dcaf26769bf4e73edc1c4e7235da38e5a5bc4b70f8e15ca140c92115
SHA512

8675d26ec62f759ddf16d0ea516d1cc263817c7b16d85b6351c178762f039c0c13f61f697ced042c45797d722ae25f2786a8930ad6285e6893497c0396554d82
SSDEEP

49152:EB2a9rRyQnuSCRv5EhlxtZ7AmvtWbfzXeF9/bo48QCeuNdMZA1Cd:G5xiN2lxtZ7vtWbSF9DoV8uNdn1Cd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057ee14ed82569656b3f1b9f4e9c1cbf_JaffaCakes118

Files

057ee14ed82569656b3f1b9f4e9c1cbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10f318ab9f1dc127ed3f74b976ecb79d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID
CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

.text
Size: 31KB - Virtual size: 15.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE