1ba8f3769bab0f3b58b48a5e2faaac2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ba8f3769bab0f3b58b48a5e2faaac2b_JaffaCakes118
Size

351KB
MD5

1ba8f3769bab0f3b58b48a5e2faaac2b
SHA1

d944569fad57ddaf407755cb75780d3bf8e4f00a
SHA256

2800f1244c22fb5962348c0ce78608a493d01173e34406eb12e37d2b66387d41
SHA512

4cc04589c211032c4c1de1a4f7ce088592e936554fa3bbc81ca39c1c6a127282b80c3395a0c2d005c20283d5d5a39dde3f4971a5600a87770352a3bb90d6ae52
SSDEEP

6144:nmlsXaXAT2QczjkqkSYKyCSiMfrKoilo1BX2eZ8qrF+hctM6XhDXAjYiXJRT8+:nqBAdEkKzy/iMGNo1BGzqqT8hrAjBXbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba8f3769bab0f3b58b48a5e2faaac2b_JaffaCakes118

Files

1ba8f3769bab0f3b58b48a5e2faaac2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dc5b872453e7f12c3159dfe6e0dd577

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
ord1

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 23KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE