8d5f50289726ec8e90ab3ce808d2d2f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d5f50289726ec8e90ab3ce808d2d2f1_JaffaCakes118
Size

4.2MB
MD5

8d5f50289726ec8e90ab3ce808d2d2f1
SHA1

db4daecd43a0d03d73850e43e3e350b8473fe8c9
SHA256

74dc0de2233837222cfc8cd986e19adb842eaf91dd3ac28290864c95364b9f0d
SHA512

ee13df81fbe36e36c58b6a8307611b5e9d48d5bc8b3b8abba3cb198daef03e1e413a7e587d065b9cae1fafda7b900996f784e83198cc91f95b503c17f81910a9
SSDEEP

98304:jkXvKTrlMymiWnBbChiG2YHzbiNvdyla6X8Dq7kl8UmjnAgq1e/R3xdNGH:jHPlMymzBIiYHXCFylxYliOQzm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d5f50289726ec8e90ab3ce808d2d2f1_JaffaCakes118

Files

8d5f50289726ec8e90ab3ce808d2d2f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f02a50369a29fc03f87e9038ec533d3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 22KB - Virtual size: 14.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE