8357719e6204db240b9e9dcc71c4146c_JaffaCakes118 | Triage

Sharing

General

Target

8357719e6204db240b9e9dcc71c4146c_JaffaCakes118
Size

242KB
MD5

8357719e6204db240b9e9dcc71c4146c
SHA1

66c5459c251020e0ba79f36c7e10d6924a09ebc0
SHA256

36f8824c80bded03125b0e341f4d4049eec560254fac824e2e8e221e56e1f9b0
SHA512

0839bae6c8c02e748b344816e0d5a2b7c30343d226777eee3b2903f62aa5a5582cfbfee218c3215187229b6f902f0c9b637e0cd1bed73a1e5b10c9bfce55de44
SSDEEP

3072:mGcKeYbMC+VGzoFY3vt90k5OCfRHHrjT96wOu9pAoLmlCJwS/fTchi9iQDWxzowA:bcKex/PY1928XJ6wOGueBd/GkljpqZDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8357719e6204db240b9e9dcc71c4146c_JaffaCakes118

Files

8357719e6204db240b9e9dcc71c4146c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE