683216a5dc27bee21ce5c10f9313033f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

683216a5dc27bee21ce5c10f9313033f_JaffaCakes118
Size

138KB
MD5

683216a5dc27bee21ce5c10f9313033f
SHA1

fa334b3cb9958e474d53a71cb74b2cb3c86a10ac
SHA256

5d63c3c7a810c677084a617f0031e628c8691a6625b96ed50d9d163413dd10a3
SHA512

9a25ea2619b3d1387e5523027204e90a23b4a9eaeb8c49fb20773451b7fbcee1f80856f3d1b57a6248e7494c350abc73ee36e611b9c288221afad75eadf3bdc3
SSDEEP

3072:cz1ya769vTCSbEjg9D+fDdPcpZ/2XMkWWPLYPw22E0gKbKa:S1m9nbog1+rdQO8kWMLYo2rKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
683216a5dc27bee21ce5c10f9313033f_JaffaCakes118

Files

683216a5dc27bee21ce5c10f9313033f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dc5b872453e7f12c3159dfe6e0dd577

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
ord1

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 23KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE