179582bdc0b4d7209d35113142f38a93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

179582bdc0b4d7209d35113142f38a93_JaffaCakes118
Size

1.7MB
MD5

179582bdc0b4d7209d35113142f38a93
SHA1

d3f5de4251de0a81e4c89458673057f68255ecd6
SHA256

ac1d05536a7389ceadacb31bf6e1d738c1bd240e8c44c7e63957f67d294f1770
SHA512

6c630cb6b7afa9506db2c8d4af6163d50b1a0966f17f6197445276d4b820d52fc82c60f389df54f1ef22997818317251c25d828b66745d8eecf6f791de44aa1b
SSDEEP

49152:maelIwoykOPtahAhQjK4VPZXLUPza8vqieL5pMwnR:qoyfwhAhMK4oPtLebMYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
179582bdc0b4d7209d35113142f38a93_JaffaCakes118

Files

179582bdc0b4d7209d35113142f38a93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2af69e734ced8d10952e1507b94f89af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

.text
Size: 30KB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE