4807caf13c9186daf10d20fdfa96e5cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4807caf13c9186daf10d20fdfa96e5cd_JaffaCakes118
Size

93KB
MD5

4807caf13c9186daf10d20fdfa96e5cd
SHA1

e6718880c1feb604016ec7e380e5cdb385a20435
SHA256

c96fa489555b7f4126707388e3939ac4d003a2210a49f38cf187b71e54c600b2
SHA512

53e9b8c2ae7866d71e28666b27b31cb22db775adf36755f24a99acf77a7e259abe9bddca7d77304f55aa8c0b29256b446f5a91945738e5932cf2cb4446b6c420
SSDEEP

1536:n8qHfp4o5VZGDlG1zt4R7900pIV5QgCFZ3jHnGF6TfProG18sfonchnYs6Xm:nzeo5/GDU1iWvQgCFZL/Ts+vwQ62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4807caf13c9186daf10d20fdfa96e5cd_JaffaCakes118

Files

4807caf13c9186daf10d20fdfa96e5cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49532563853112fa685bfc02c644e3bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

HlinkNavigateString

comctl32

ImageList_SetIconSize

Sections

.text
Size: 20KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE