42f1d90e3574ec501578351043ab52b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42f1d90e3574ec501578351043ab52b5_JaffaCakes118
Size

4.2MB
MD5

42f1d90e3574ec501578351043ab52b5
SHA1

5c3f9980ae603b43602045fdec2d51076d4aa95b
SHA256

fa129e2735fa261f5671549080cf0e2ff632ba56a0deef97b5549dd4ad6535c6
SHA512

4e1fe063e489c13d287b6e49cd6b6c701a2e5c9e9786d3f59a9df9bfbb2fa8ae6c1e11953f1b597e0ec05b6cc0f4c4cbd8d94315d809fd51095aea475cc304b3
SSDEEP

98304:m8pf5fD7WZwZwdeXiNxNTqdE3IDQTAeyOKGNyaIPo9TbC:mo5fHmwZEeSNHYDQF9KY6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f1d90e3574ec501578351043ab52b5_JaffaCakes118

Files

42f1d90e3574ec501578351043ab52b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4b6dea0163513ea1aa7e4a031df4f05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

winmm

timeGetTime

Sections

.text
Size: 22KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE