43c53ec0f3a50c97f8f270d4581d1e3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c53ec0f3a50c97f8f270d4581d1e3b_JaffaCakes118
Size

1.6MB
MD5

43c53ec0f3a50c97f8f270d4581d1e3b
SHA1

c12d214ffb86c8746ee27e647e76eabcbd7eca1a
SHA256

a7b28e9f051390d499ca459f6cf3e18cb13021ef2e99824336029a4915c80c93
SHA512

60d784bbf5ab6d4f94b10c3fe5073deb4b1033003151c753e33caa2b392b252683e907c2cfeddd274b07c9075d3888cd01c9fc764d12d1bfdb163794d2ca5524
SSDEEP

49152:woY+5ShLNcNTO5qXDwvYKlUoE1lb9v4+lOMt8MP:z5SXcxO5qzwvYKOoI5SdMtP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c53ec0f3a50c97f8f270d4581d1e3b_JaffaCakes118

Files

43c53ec0f3a50c97f8f270d4581d1e3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d1d47b028ffffb17e0da2035d5aab30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExW
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyW
Sleep

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

advapi32

RegQueryValueExW
RegSetValueExW

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

CreateStreamOnHGlobal
CLSIDFromString

comctl32

InitializeFlatSB

comdlg32

GetOpenFileNameW

winmm

timeGetTime

Sections

.text
Size: 20KB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE