8a096621e74ba3c922e8665ec32d2057_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a096621e74ba3c922e8665ec32d2057_JaffaCakes118
Size

364KB
MD5

8a096621e74ba3c922e8665ec32d2057
SHA1

bc536bfda9d60bd598a4ce31521389e9a5f74e09
SHA256

c6622bc01c66ab1aa5c18b3eb31e8fd2f6064e72397f33175d3c295789d93623
SHA512

9181f96c029903404e57fc53beeb0ed278d48100611ae5e224130a2c62706c2b89bb61fb70ddac7cadc3193d9fb87e012d47c17d86eeced48a10222ce0b4a23a
SSDEEP

6144:lBvJsLqijL4Cc/IuFsyO8ttbco89PXhy3TsJNlaRNagPnY:2LqA4CMVFsyLbco89PXswduNtvY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a096621e74ba3c922e8665ec32d2057_JaffaCakes118

Files

8a096621e74ba3c922e8665ec32d2057_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 43KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE