360d773498950a79513dcf91e5442e80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

360d773498950a79513dcf91e5442e80_JaffaCakes118
Size

204KB
MD5

360d773498950a79513dcf91e5442e80
SHA1

e5610b4d6a250b23c5925a187da0709a7bfbfca9
SHA256

c96dcd32c987941251277e5ed63a9592961b92055065d0cc082f4cf8c006c2bc
SHA512

b3f763324143a2c0318ca85a4cc8c3fc32e34bf32fd4db1910231c9ccd82c76cf29dba388eb0ab9c0180df633c3a255e2817b8b9df1ab5e03608cc82a30384ad
SSDEEP

3072:PctRWEwUCUbkAQFVxftOUtzpql341t1ZRbacltjNZeLq8rHkwRRBH8nrWwKq/NNw:hhAQ7vNfUo1baclfcG67RuCq/NLop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
360d773498950a79513dcf91e5442e80_JaffaCakes118

Files

360d773498950a79513dcf91e5442e80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4bc27a9ebce90962d8b1e0c55120ec57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
WriteFile
Sleep

oleaut32

SysFreeString
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA

wininet

InternetOpenA

Sections

.text
Size: 19KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE