4e1b2dd3627ead55f29a45ead350c198_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e1b2dd3627ead55f29a45ead350c198_JaffaCakes118
Size

159KB
MD5

4e1b2dd3627ead55f29a45ead350c198
SHA1

cb23e5d19a4216e129811964b77d7189a6fae70e
SHA256

a5758135dc1811cbe483fff70028882a448caa8811f04ce6c32ea618583d4364
SHA512

f4a12512297eb285736300dca1cad6c9f66b9cee7d4a56857ae8df2b2bdf1d3e42eee2f4082ead69f943d486c80a4c2297d5a176266a346b5c045636fa6e9522
SSDEEP

3072:qiPE4TuqcZesal5fklFULl0bkJ/dWE4PV5c3K7/houjm2pXj2hOHuzDF/qtR7:qClKqcAsUhk3U50b6WjE3KF42p3HF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e1b2dd3627ead55f29a45ead350c198_JaffaCakes118

Files

4e1b2dd3627ead55f29a45ead350c198_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a76574a973124f77a05fde95b99667d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

HlinkNavigateString

Sections

.text
Size: 23KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE