092ad769a0f62647db85ae5fc01d3530_JaffaCakes118 | Triage

Sharing

General

Target

092ad769a0f62647db85ae5fc01d3530_JaffaCakes118
Size

71KB
MD5

092ad769a0f62647db85ae5fc01d3530
SHA1

fea1f57627f1d70560a7337238aef2e463efaf16
SHA256

50f433b0cdb16eea550fe1f26edf370e29beb0f6e23b6d724ed0ac6de5029beb
SHA512

f4fa0e91132ec4a1f0dd4ecde33d193112f43e4f54982f4c19f581d5a99b0684c09d529443fd1a09b50aab3379ca926ef5aa26750444cbce64e0f8f29800d1d7
SSDEEP

1536:74wXw9yokzDexLoB8wmoNySArJso5LPzU8UhU3N:74wXw9jkzKd5oASA/5LPAnm3N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
092ad769a0f62647db85ae5fc01d3530_JaffaCakes118

Files

092ad769a0f62647db85ae5fc01d3530_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dc5b872453e7f12c3159dfe6e0dd577

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
ord1

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 23KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE