23886f740cbc4356bc5aa945d73a75d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23886f740cbc4356bc5aa945d73a75d7_JaffaCakes118
Size

19KB
MD5

23886f740cbc4356bc5aa945d73a75d7
SHA1

b425f2f122ce14adae7b753cf83cf9f4d6231572
SHA256

9322fc9c55953a5c4eb538d068b01d8aa0b34d6edf0bf6f9238537110782cbe6
SHA512

84b3469a82868731c217ff422de2bc4f1ad5770ab6ed980a40805f315c816f075cdd68a1c72d65540b1c6e504141aa1d5d34d4f4ccfe3bb01ef5d863f8b85cc1
SSDEEP

384:4mr0QXahQXsbRh87Taz8L3uof9zVNRm3TCha5H7Z5PmegPLmCawxYM5:4k3sVh8nawL+wR5aBgPi45

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23886f740cbc4356bc5aa945d73a75d7_JaffaCakes118

Files

23886f740cbc4356bc5aa945d73a75d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1359a50ea21b312f0f42427815c5f387

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 19KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE