65b5d32ca3e5f5b253332dbde8371264_JaffaCakes118 | Triage

Sharing

General

Target

65b5d32ca3e5f5b253332dbde8371264_JaffaCakes118
Size

93KB
MD5

65b5d32ca3e5f5b253332dbde8371264
SHA1

6d30574372898296317eb2e7aee3065335888959
SHA256

cb72edef9a187971ae0a2e0ff76cb33843ed7c64390bba5021ab9c1544c6e341
SHA512

4665cd79474d1d908814451cb4dc3cc0e177277a7c3f251cbbd671d2610a80ecdb630c261c5413dea11c6caa61f67954b72d5f9f7e422ffc22a0beda33d9e229
SSDEEP

1536:W+x/PokigxKay4qr9PjDb7rH9xWzWlrAQ2aR02lyn8GrbzGMSdi:fli2Knp9LDb7z9DJAQtU9bzadi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65b5d32ca3e5f5b253332dbde8371264_JaffaCakes118

Files

65b5d32ca3e5f5b253332dbde8371264_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 42KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE