85fd2237561fcbe01e014e7e4c387876_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85fd2237561fcbe01e014e7e4c387876_JaffaCakes118
Size

1.0MB
MD5

85fd2237561fcbe01e014e7e4c387876
SHA1

770100894e66e185ab16affa698019a038f1686c
SHA256

e82d0ee5b898cbcb0974022c3534a6aea3e94ef27f7cdd34cdf02fd613889c52
SHA512

dfaa9449301239c890f1f44abcfda175eb2d86bad6fb167e0e2ea3a72a24f81aa4f600993e0b24d5a536388f47eb29f0c31be2e0515281114f0986d0c842d1f0
SSDEEP

24576:y0xsNuNF8ULE3iArWrYKrlTfuU4JffR4h0kCXtnMlKBJC:3zKUg35rWkq9WUw54hQXtnM8y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85fd2237561fcbe01e014e7e4c387876_JaffaCakes118

Files

85fd2237561fcbe01e014e7e4c387876_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c15f13dcaadaaa55152434c9f80d048

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

winmm

timeGetTime

Sections

.text
Size: 21KB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE