78160fe02dfde547c875920ad47611f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78160fe02dfde547c875920ad47611f8_JaffaCakes118
Size

374KB
MD5

78160fe02dfde547c875920ad47611f8
SHA1

3554a9e5d11af7c00b0bb58dab7e6db55f15c2df
SHA256

90f913fc026dbf0bfde659c8c06a22b93f82ebd4a871e6a06be172924a51dd4a
SHA512

c9ff38e35ab6c10af835f6bddae683ea924652e60ca732c28e783c79dbca02e9346afd0ea6c8b91677ce08530dbeeb6a8e01f27167c597f0f3f24d83018fda32
SSDEEP

6144:Y4qLVyOB7C7pJNy4iMctLty/4I7SsBfS9Zp8HoxW+FawUW2u3MeLJt2Gc1z:/qLfBm7pJo4FcZA4vs5Yp8utFawz7v76

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78160fe02dfde547c875920ad47611f8_JaffaCakes118

Files

78160fe02dfde547c875920ad47611f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

363d35535eca8b2e57b07ad1f7624def

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

.text
Size: 21KB - Virtual size: 27.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE