1b653f27c9e02e67ad2c453cf8359a75_JaffaCakes118 | Triage

Sharing

General

Target

1b653f27c9e02e67ad2c453cf8359a75_JaffaCakes118
Size

21KB
MD5

1b653f27c9e02e67ad2c453cf8359a75
SHA1

00622fb5593af4e2ba097cac4787bf4b308f56c6
SHA256

a9a43dad30c7980df1392513ccdc59756f531b974b8c4d0f1f6683e31ed0c17f
SHA512

381a80697b1b1df2fb905d4ec3a5f067b8e74ac4752ca205998273422aac35eed21c61462cd8c978f98b35651c3859d7bae6080816f58416ff177e9b60d89ba9
SSDEEP

384:VHgX516GGtJG/3csbqFQiSRLqzDkb7gud7LmD/RnM3Jor7Os+sa8y0sb2o2LawxQ:VYjGtY/ss2iVRGzDkb7g2n+/W58ORbUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b653f27c9e02e67ad2c453cf8359a75_JaffaCakes118

Files

1b653f27c9e02e67ad2c453cf8359a75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6e9f842ad3d764ea0e45106a86af42c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 21KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE