727144d87df8fd335c2aa754bf7a2c04_JaffaCakes118 | Triage

Sharing

General

Target

727144d87df8fd335c2aa754bf7a2c04_JaffaCakes118
Size

486KB
MD5

727144d87df8fd335c2aa754bf7a2c04
SHA1

0f0df4b9475c7cdc74356d5f2d433e7c15d067ee
SHA256

ce948e4995d27e636cd723e0eaa153540cfb3eddb6050b402b153caba5ac57e0
SHA512

30911e1b7b1474e654564ebe49d8bfc2fe97bc3fb65c19d9639446da0048e5e89b014889f85f63c34071b0e779677edccf02b08d581dcef6f1c190a41e3d7238
SSDEEP

6144:1DwB77777J77c77c77c7TaqbF5UudAaklX9qXH5Avr0csffuupZsaJQQyjvV+qi2:jPUfzLgZ+8HpnyDikYX9PIswAuNt1B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
727144d87df8fd335c2aa754bf7a2c04_JaffaCakes118

Files

727144d87df8fd335c2aa754bf7a2c04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

715379fc005e31326c37c9104e3f3ee0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleFileNameA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 25KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE