8211c2fb680474f3f355f082fce4c497_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8211c2fb680474f3f355f082fce4c497_JaffaCakes118
Size

2.9MB
MD5

8211c2fb680474f3f355f082fce4c497
SHA1

9a25d7e745be13a6d2d34c4149a0dde4cb881ceb
SHA256

b9f5cbed705455119dc5d60f3dfb4a64c5114c4569f8b7db408b5196b0d34fa7
SHA512

5f9c694f9c7419bea61e0e40f28005b472d7e8aec8228141a9bba130d610e06e1e13aa0a701ad03d355de32e68de190adb28c289d0ef47b09755bd68f7d9f5f0
SSDEEP

49152:mKAB2WHUjfyLZaXsUNmyuzacNVUpkQTbhgrhIqv:mKsqf6GU1zaRjTVwC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8211c2fb680474f3f355f082fce4c497_JaffaCakes118

Files

8211c2fb680474f3f355f082fce4c497_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1432fae7b9bdbdd7bfc1c1b3ffb4cd78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyA
Sleep

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegSetValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState
InternetCrackUrlW

Sections

.text
Size: 25KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE