683e2cd3d1aaa41a13774ab21a9b1921_JaffaCakes118 | Triage

Sharing

General

Target

683e2cd3d1aaa41a13774ab21a9b1921_JaffaCakes118
Size

4.2MB
MD5

683e2cd3d1aaa41a13774ab21a9b1921
SHA1

7c9a176045bcbe62e317599d2eeece06bd768af2
SHA256

831f0923480b03b69baba9e0a7ce22809bbcb4ab29f6f6c291bcd18fb4f3870b
SHA512

362abf4eac4d59157b3a1234d1f3c9a38f24c1b7ad61a4535ba6ae90e24349b4a2573b385aaf194a9672eee32d7dbc252ae2e7c5819b6b9159047b582e4647ba
SSDEEP

98304:m9YhTZCzqZwdeXiNxNTqdb3IDQTAeyOKGNyaIPo9Tb1:m9YhRZEeSNeYDQF9KYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
683e2cd3d1aaa41a13774ab21a9b1921_JaffaCakes118

Files

683e2cd3d1aaa41a13774ab21a9b1921_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4b6dea0163513ea1aa7e4a031df4f05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

winmm

timeGetTime

Sections

.text
Size: 22KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE