3c4137d1769809e144b853e64292460b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c4137d1769809e144b853e64292460b_JaffaCakes118
Size

46KB
MD5

3c4137d1769809e144b853e64292460b
SHA1

125612ccea3a5a32f066dfbaf0a7bca9e05f833e
SHA256

8edffb90e6cc1908ae54552dcebaf727708548844762d481cec282000d956af2
SHA512

f8c1d3d03d1bf7c12fef960b17abb8839470fbe2236d7719a0905bceafaa9b99ebe36cf2984ddfe017ca06cc21fd352be1423d3ba518adaa8c71de48f62cb6b9
SSDEEP

768:WsK2NxKrWg1sqgvYKnVFd4RrKJG50N8N+W1rpQbiV0audO6oz4eQvFZx/V:WsK2fKyaxg7/45cl8VGbiV0auipQvFTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4137d1769809e144b853e64292460b_JaffaCakes118

Files

3c4137d1769809e144b853e64292460b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a76574a973124f77a05fde95b99667d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

HlinkNavigateString

Sections

.text
Size: 20KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE