0b81a8baf8fcc8a3d9f9af7a1efb580a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b81a8baf8fcc8a3d9f9af7a1efb580a_JaffaCakes118
Size

131KB
MD5

0b81a8baf8fcc8a3d9f9af7a1efb580a
SHA1

2edddcf3b2dbc22bb576ccc3bbc65b45540c459e
SHA256

7c0769d9f2d052abb9f6ba9e1bce94d3cdb785f332015f57ff7520d02753694e
SHA512

3c17a919bf23d04c3f19540a1e9a3822f5d4f3c41300e34dabf1e290d8dbfb73bc5efa28c1c4a4072727686de5377d716a44ff2aa6876d6c6877169602818428
SSDEEP

3072:PPtv2QZMyDY2KZJWOlRdWPnf2JCXq32y7o:PEZTlRdWPMeso

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b81a8baf8fcc8a3d9f9af7a1efb580a_JaffaCakes118

Files

0b81a8baf8fcc8a3d9f9af7a1efb580a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3a715ed550364e910e6147f3c947533

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
WriteFile

oleaut32

SysFreeString
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE