0868796f84419d80ddb0c1a041a8a512_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0868796f84419d80ddb0c1a041a8a512_JaffaCakes118
Size

313KB
MD5

0868796f84419d80ddb0c1a041a8a512
SHA1

973b816358bb153d74c78719b7eb5cbfcd483b4b
SHA256

306a7388f12c5591fa24cd11e1d2befbad71950c68dca3d1522a899ca14de304
SHA512

20237d495942e3fea72cb82d8873813ec93cb53cbd7df40a041d50a8be4a0a57e38d10410c0d36bad828e70d5c3b5b2e5609a208efb5262cd407cf70a882b3c0
SSDEEP

6144:yAiD8nbBwPpWrZt+dW6rka4VDWYf5o4UpUWdrc3NNN5YCQyvd:TQ8nbNrZMg6rR4PVUtSYi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0868796f84419d80ddb0c1a041a8a512_JaffaCakes118

Files

0868796f84419d80ddb0c1a041a8a512_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b21349150ed0317b6ae526441512b666

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

oleaut32

SysFreeString

advapi32

RegQueryValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

Sections

.text
Size: 19KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE