5efa043d36541211e374375ea6aba502_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5efa043d36541211e374375ea6aba502_JaffaCakes118
Size

88KB
MD5

5efa043d36541211e374375ea6aba502
SHA1

d26b7ca946699ce5ac561b18311f1ca172b57157
SHA256

7aaf2450012432edd6404ac076d8c3d268215cdd44760ff0e8b3ba769255bedc
SHA512

273b7e19388a5363977b24800d8154c133a189b8f5e57e7827a6e5263cfa471e492d2c35e81e9ef6c704584001e62aabd93904f9deb345316c52295b31c37d2d
SSDEEP

1536:1TnGrRySihBELWuOjrLdlJOZB3Ehj50Ndw9SGsnIAxoBxqGKB6r4TajDnFx:YYSiXE6vjrAicd8SGsnInBxqGB4OXnFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5efa043d36541211e374375ea6aba502_JaffaCakes118

Files

5efa043d36541211e374375ea6aba502_JaffaCakes118
.exe windows:4 windows x86 arch:x86

715a2444e3b3cf0569041617948aa710

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
Sleep
WriteFile
TlsSetValue
DeleteCriticalSection

advapi32

RegQueryValueExA

oleaut32

SafeArrayPtrOfIndex
SysFreeString

wininet

InternetReadFile

Sections

.text
Size: 19KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE