337a7a1779d955610265aaa3d0f79bd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

337a7a1779d955610265aaa3d0f79bd3_JaffaCakes118
Size

173KB
MD5

337a7a1779d955610265aaa3d0f79bd3
SHA1

9dc3f7e957d9390d36b9ccfc9be06b2573cad571
SHA256

46e84a7c7b4962f845f49755830a8ab72047d4de01abf54a970472443e47e6c0
SHA512

27103352ac344520748696c5ba3146238d30fb0a870d9b4537a5a1367e2fb24900abd4cbd338a7442b70850eed2bd8ec1107a9d7de4b4a6d346e42ad04fdb418
SSDEEP

3072:BhtxFtu7WvKWQQZDBmbl1N4oRUCGuqMATVcvbwucxHc73:bjFc7WvKHXl165u7wybwl9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337a7a1779d955610265aaa3d0f79bd3_JaffaCakes118

Files

337a7a1779d955610265aaa3d0f79bd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1359a50ea21b312f0f42427815c5f387

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE