491906fb02624a58ad94b4ad9d2f5b14_JaffaCakes118 | Triage

Sharing

General

Target

491906fb02624a58ad94b4ad9d2f5b14_JaffaCakes118
Size

170KB
MD5

491906fb02624a58ad94b4ad9d2f5b14
SHA1

3b6f44ea7852dbb4fccf0b07d47b55696b72ff9e
SHA256

774bc924df62eb0226e7a69ea7b5b2f9bb28729c9a24d480c00b31f738a26977
SHA512

43d087cd088af9563238ab4b0e04145c4da424e1014af97f8a96931e6d968c74e110a65befb20e2782b3b9f7a832a4fc009f7397f4034a1264984d9714fe7ff8
SSDEEP

3072:846VGSGWuMHntHXjka6uAW+njgN0sSAOL/AJ/z92GImbpdylsA:846V9GWuMHntHXjb6uAWUjZrP8z9tIma

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
491906fb02624a58ad94b4ad9d2f5b14_JaffaCakes118

Files

491906fb02624a58ad94b4ad9d2f5b14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6ced02617181defbf7e17c76a9427b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE