35b78c380ed22093b2a70a4a55dd83e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35b78c380ed22093b2a70a4a55dd83e1_JaffaCakes118
Size

373KB
MD5

35b78c380ed22093b2a70a4a55dd83e1
SHA1

d61e27386a59471bc99123f5289c3332b018a3ae
SHA256

26384fd673bc0c9b749f531fa720267901d884a791c10381ffb9b3148b4dbb75
SHA512

af154514bb7b8b42e19d47b0ab977102726c6285cf8f382c0e2e64978bcc456811aa5b20e358509f1e2f1a8158035b79f96dd5e5af674fa39bf2cfeee2fb7e02
SSDEEP

6144:HxNsTHK+8ryPbCLbKl9fgxnDpl9qY98krHtLY/0U+u0trlgHfPgkUDj3r4h:RWTHK1yjYC9fgxDpl9qYeCtc/0Uwt2HV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b78c380ed22093b2a70a4a55dd83e1_JaffaCakes118

Files

35b78c380ed22093b2a70a4a55dd83e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93fbe85150dff48a406179e7a918c360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 23KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE