1b8c2c82c9013baf6a672f2a4f8b9a5a_JaffaCakes118 | Triage

Sharing

General

Target

1b8c2c82c9013baf6a672f2a4f8b9a5a_JaffaCakes118
Size

1.4MB
MD5

1b8c2c82c9013baf6a672f2a4f8b9a5a
SHA1

209f91bd4c0ce492fb2984e24ee8ee9c613b43ab
SHA256

7b56d9aed7b4a4f6e6dd2dced0b7d6aca622537347c134ce1bca2e21db20fb50
SHA512

7b0b16e2945aff3a15caa84c6d1a6e66c1b4f6f4caf5539272fe97f0e605801f6b06cd7ce84d6c986fe5767f4037b7164be2e6ab9489d06f64881de175ad17b8
SSDEEP

24576:fx9SvxUGvLAKFYUn7wCyq62+5BOb+HtMH13GZ1HPVNq4DnSI0vFNglkvJHMRxd/7:pIJJvs0HsCABs+NoWLVc42IsF+lkhs1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8c2c82c9013baf6a672f2a4f8b9a5a_JaffaCakes118

Files

1b8c2c82c9013baf6a672f2a4f8b9a5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37d9c66987ace97ab18649a5cbfccf28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
BlockInput

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID
CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

Sections

.text
Size: 121KB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE