67fcbae9d6170edd1aefe7797446ba5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67fcbae9d6170edd1aefe7797446ba5f_JaffaCakes118
Size

198KB
MD5

67fcbae9d6170edd1aefe7797446ba5f
SHA1

6ea64fa83c4e697ae1343a5e8659e7e335965b64
SHA256

4efbb16860a7260745f1d56e13ef13829abc8fe8ba7e592bbcd66d1433184a73
SHA512

786f5e1a51cf7d287c5e4f633029e24b6adb7c4d4ef99455c333d1d1c32d13ffbce5645f90d8efaf9f185284c4202dde58bd250e5576b5af85ab11b477398331
SSDEEP

6144:Uw1znGqw8p6xoIPRVUpqkRvxNujWtB9Y8hfe9s:hz3YRVU12Wj9Y8hm9s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67fcbae9d6170edd1aefe7797446ba5f_JaffaCakes118

Files

67fcbae9d6170edd1aefe7797446ba5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a44d45584dcf9ac6a7643097738df895

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

.text
Size: 43KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE