0ebc0228134414b3f1310dab04723f8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ebc0228134414b3f1310dab04723f8f_JaffaCakes118
Size

605KB
MD5

0ebc0228134414b3f1310dab04723f8f
SHA1

bc5e17ed2833440d7e913fbd50dbb260b6523bb7
SHA256

fa7565e50547d58cbe26e7bbe6a7041dbefa489bbfdce9973e2fc3445fe7ac90
SHA512

245a80a8a9b603f20776d7d97a380f05028a5cc1a979d36f39bc84661255ad559874c99c137f5c666823b293f45da2ed8ecfe5710cd901a73d0b3d94c29abff5
SSDEEP

12288:1cEkUW2skp7ZkXMIRrPzKqsbqoBq0Pv6jHNsWDvWvxQydWFS51OVpN57zhXMrh:mqsluqsbFf6zH+piSHovVMrh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ebc0228134414b3f1310dab04723f8f_JaffaCakes118

Files

0ebc0228134414b3f1310dab04723f8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfce2673902e457908cf2154cc96c58c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExW
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyW
Sleep

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

advapi32

RegQueryValueExW
RegQueryValueExW

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

CreateStreamOnHGlobal
CLSIDFromString

comctl32

InitializeFlatSB

comdlg32

GetOpenFileNameW

winmm

timeGetTime

Sections

.text
Size: 20KB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE