24630e059e791105b1ac9635cc140eee_JaffaCakes118 | Triage

Sharing

General

Target

24630e059e791105b1ac9635cc140eee_JaffaCakes118
Size

240KB
MD5

24630e059e791105b1ac9635cc140eee
SHA1

4b648bfb51fa59c430b59d4d2c1a672c20cdeeaf
SHA256

e7c1800b27ef9efc8950b330e6007868e0152c3a19957eddd7261778c7a4dbc1
SHA512

d477741d11c3de77e4908c2a29615627e7cf97548608a29046d4282cccd41c1a3d566871b4664c972c4885a666e43ff24fb374f2e7928c8578069f51101adeda
SSDEEP

3072:yvzJqi5wYSmZjVXVBrPxiByCcdb+/yCq1lDq/H8aLXcdh53/wrnk7+lpxrTyKkfo:y9fSq3G8dboyCq1aLG5YrXfyKkfczZ0M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24630e059e791105b1ac9635cc140eee_JaffaCakes118

Files

24630e059e791105b1ac9635cc140eee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 19KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE