4da59ba3828136f51dc2bb602e89aab2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4da59ba3828136f51dc2bb602e89aab2_JaffaCakes118
Size

110KB
MD5

4da59ba3828136f51dc2bb602e89aab2
SHA1

3ff7fabf6e1d049dd232019805d5a8e7b4f97bde
SHA256

87a10bb89ad80790cdd0b269b12f0780c730f6f68a5a6e442267bd352bdef6b3
SHA512

b8d4bfbf960f6e35d6aae6735684b04ab6f157e42f86d14c2f68d2dae4f7f35634299caec9fe78280731774f58ba36241d179e965918df3e9569e9ce5e3d6fee
SSDEEP

3072:vRAuHphalmWvXFUFswzMC/bPBW4Qct0MX:p5HpklfCswzzzPg4Qcye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4da59ba3828136f51dc2bb602e89aab2_JaffaCakes118

Files

4da59ba3828136f51dc2bb602e89aab2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 44KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE