361398e0d7f0943bc5c00fe245bf4e6a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

361398e0d7f0943bc5c00fe245bf4e6a_JaffaCakes118
Size

66KB
MD5

361398e0d7f0943bc5c00fe245bf4e6a
SHA1

5b0f52337ad6e15ef61eaa7e22eef56a905d3332
SHA256

ecbbfa307a22bc1f710497409cd166bb8a57b847ef95781742cdc54a8627770f
SHA512

16452b7981bcafea4baca2b1ff27601c3a817c6faa479527c1a125089e9e140c3415befde1b32638876cc78a004ee2a74a4c4e0b6ce50d75e5b074c691d6dc66
SSDEEP

1536:xDBcMewhI95PWFLgkRR/PKBL2FF+39ztotHxDvrVt6aJM/:xOMeqI9tWLKc+NztoBxvrf5M/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
361398e0d7f0943bc5c00fe245bf4e6a_JaffaCakes118

Files

361398e0d7f0943bc5c00fe245bf4e6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dc5b872453e7f12c3159dfe6e0dd577

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
ord1

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 23KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE