765ffc3c7879df9f2bfb7b3a772e7455_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

765ffc3c7879df9f2bfb7b3a772e7455_JaffaCakes118
Size

5.9MB
MD5

765ffc3c7879df9f2bfb7b3a772e7455
SHA1

55229ee2c559aa83e5e410b9618b62f35026523d
SHA256

939259dc944214a1446ca5f884fe45ae18f818ba0f32b9f45133c896c67d8be4
SHA512

c269449fc4c27616ffd0ec3ec0d6ce4a445c7382b3a35bead3d8dddace94de413d602927315c6420038cce220c14b3eba3018b8379d3f5999b3995287fc59212
SSDEEP

98304:/Z46hkhX80Z1N3/FhR+CVzawaJo1zwqWnfyMJeukvsyFUgTyGpbVlof:/Z44yZ1N3U3KSqG78J99DpjA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
765ffc3c7879df9f2bfb7b3a772e7455_JaffaCakes118

Files

765ffc3c7879df9f2bfb7b3a772e7455_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8448ccfbda5974952d32741e810e39f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

.text
Size: 47KB - Virtual size: 26.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE