6193d1cc5f597920cd9b1be3c134e82c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6193d1cc5f597920cd9b1be3c134e82c_JaffaCakes118
Size

42KB
MD5

6193d1cc5f597920cd9b1be3c134e82c
SHA1

56805d3469fc1c0cb5ff3509a3b4d604e51156c1
SHA256

855efc3d7df3d342386f970d4ef7780ed0173544c2c6b1d9dcf4f667083f60f8
SHA512

0d2b7c77eb2a770540b529dd4d95c0b401ba8486e8919618fb636a65b7956d9d654b47834d8a7d31b3169efe4fcc28672b6f67b593c0c1dfdeaa1e805fe57aad
SSDEEP

768:gonDBcrA1BYDwhWt95lBwD5lFL7zOLurKk0w6W/z7KL9zx5UfZs6lr1so+2MOT:xDBcMewhI95PWFLgkRR/PKBL2FF+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6193d1cc5f597920cd9b1be3c134e82c_JaffaCakes118

Files

6193d1cc5f597920cd9b1be3c134e82c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dc5b872453e7f12c3159dfe6e0dd577

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
ord1

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 23KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE