8be99160fc894c8dd197dfafbf07876a_JaffaCakes118 | Triage

Sharing

General

Target

8be99160fc894c8dd197dfafbf07876a_JaffaCakes118
Size

358KB
MD5

8be99160fc894c8dd197dfafbf07876a
SHA1

e444194db8fc99589707138ab4a6e08f36f0eaef
SHA256

bfaf7ab550cdd48b418fef4a3ba2013c31685c5a6b1252c8266ffaaa6b413201
SHA512

9f31991046d0dd32ea097f7c01293a4d17340367a12fddfa2411ba0275380acc623e4134083378652accfb0f542a7a7223acfd95a19ed5fdf5339478cdec61f8
SSDEEP

6144:kuQ9s7Im3VEfuZnqSgqE+6h6DWEqervnrQyyqO1eFQLNpS44li:kbeImmuZKqR6hwWE/rnUyLoeFQpS1li

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8be99160fc894c8dd197dfafbf07876a_JaffaCakes118

Files

8be99160fc894c8dd197dfafbf07876a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

083d5d6a36b05af3b5248bb00f95a964

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

acrord32

U_P

advapi32

RegCloseKey

comctl32

ImageList_Add

gdi32

SaveDC

ole32

OleDraw

oleaut32

VariantCopy

shell32

ExtractIconA

version

VerQueryValueA

Sections

.text
Size: 26KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE