64ec424d70aa7949de90e686db6af214_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64ec424d70aa7949de90e686db6af214_JaffaCakes118
Size

46KB
MD5

64ec424d70aa7949de90e686db6af214
SHA1

b70a08ca30ee01d8ba944fcd642e1cff522e9673
SHA256

3525a764dc36e6da74064512f4bad8f6eb9a5f52c7e3c3a42db5d56a05845c3c
SHA512

1ad0c9e66dc9c295fd42bff5bd13465d1cbea4ba5afd28c2f771b119a7c51243c2bb3585561d837f906f7ad0d1e3826d2f6950e584d5cd19442fa85c242034fb
SSDEEP

768:jZbxJcBsdMDN/2q5aLzHVzx5/83eutqeulbeu/ZqItcTtnb6Xx9Uguc+F:lbxGvt2qsLz104ZDcTZbna+F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ec424d70aa7949de90e686db6af214_JaffaCakes118

Files

64ec424d70aa7949de90e686db6af214_JaffaCakes118
.exe windows:4 windows x86 arch:x86

089802ff63768505caf762c242d35aa6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

.text
Size: 45KB - Virtual size: 852KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE