67bfea0fdb1a9a52c46db46a48c1dcfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67bfea0fdb1a9a52c46db46a48c1dcfe_JaffaCakes118
Size

372KB
MD5

67bfea0fdb1a9a52c46db46a48c1dcfe
SHA1

717f521e32b8c8ca3090a40bb4bce4ead3db91f2
SHA256

c192971e948cac8be3a39f29acb02cc8e218b8d5fcea1d49c4666e78afb584c5
SHA512

a483fc1a062a9a159be1096f915f3c56fe9c87d444d3133d4d4cd5280004ebf93e6a7314f0e06c01e25e03d0051b665d793beefcbb74f51e93acf967f556d042
SSDEEP

6144:9qtKEa6dy/kxV5scqkLKYz/W4/24EmvgJXTA1rVOO/dnDj9mx1taWSz:9qtKyc/knS/Gz/WS24Zv4TA1rgT1t9Sz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67bfea0fdb1a9a52c46db46a48c1dcfe_JaffaCakes118

Files

67bfea0fdb1a9a52c46db46a48c1dcfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e23df87b0400ca7acc04b224fa573f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 20KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE