73aaf35a65b6c21777e9253a38807682_JaffaCakes118 | Triage

Sharing

General

Target

73aaf35a65b6c21777e9253a38807682_JaffaCakes118
Size

85KB
MD5

73aaf35a65b6c21777e9253a38807682
SHA1

227ecd0cd392fa52ce288beb7ffdf2912552d33d
SHA256

0034c37e6dff4c0dd6791490745d8dddcdf081a615243da55b0516b13e837a57
SHA512

a6ea3deb6874a72b3cbe122536cb08aea97840bf816c10b6b2fba397e589dad5d1182ab49a45f290fac5066a697ab6eeb2b24fe07fec58ed56852297013af2c8
SSDEEP

768:dUFRZZqarJXR0b7KBxYf/wr52+0JVS7YEax/tDHKJD0nYc9pz8pW3FG1hl6tJT11:dUFvLJXR0aBxYfYCVS7aFjKuD9VG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73aaf35a65b6c21777e9253a38807682_JaffaCakes118

Files

73aaf35a65b6c21777e9253a38807682_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e57ea438f66b56ede058ee5a99ed5e8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

URLDownloadToFileA

Sections

.text
Size: 100KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE