68cd4227edc153aaa57f2cf3a779ba5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68cd4227edc153aaa57f2cf3a779ba5b_JaffaCakes118
Size

150KB
MD5

68cd4227edc153aaa57f2cf3a779ba5b
SHA1

54ccd45a55b140311f21fa9c0818d026d5f39d83
SHA256

ad595e7f61f3feb2295bc6e12ecace72e0a089042135cd7d3ce6be57c8ca9b10
SHA512

ad723bd1fe2488fcb51538878fd5f4ff53a0dc0445b77f176579613eca018fadff1b062febc80b11da213299d07434b0514116a41d1996fac21b7ffdbbd11177
SSDEEP

3072:JsgEyMoHEdDaL6ba3TsnnUc+VuVzM/pvU4/QN1wgcIoQOmfp:Jsg6dc6bgGz4BUaQI3HQBfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68cd4227edc153aaa57f2cf3a779ba5b_JaffaCakes118

Files

68cd4227edc153aaa57f2cf3a779ba5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c575aa918bac818b364b37306f370a66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WinExec

advapi32

RegQueryValueExA

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE