14c01162dfcbc4773720918b27f25703_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14c01162dfcbc4773720918b27f25703_JaffaCakes118
Size

86KB
MD5

14c01162dfcbc4773720918b27f25703
SHA1

136a94169affb0aadec20e09ebccf319a6687f6e
SHA256

8a85323650c845be503cf50f230fe0f94e5ba44b6c34c86536912f02eaa3d8c0
SHA512

6c2d2065caff075a87d5e9c0c3a04ae891b14ea54d81cfe80447172d52c3db58c785e0b06fd820f5b075dbb95dbdc7d88adddf4c1a06b41b9da2fc835f5baf34
SSDEEP

768:zggTwKiZ3lqB9FcfDXFNgucWaiiZ52+0JVS7YEax/tDHKJD0nYc9pz8pW3FG1hlW:z1TwK3B9m7XXgue38VS7aFjKuD9VG1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c01162dfcbc4773720918b27f25703_JaffaCakes118

Files

14c01162dfcbc4773720918b27f25703_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e57ea438f66b56ede058ee5a99ed5e8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

URLDownloadToFileA

Sections

.text
Size: 100KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE