8df47606dc4f4b75f78c5cdd98e27dfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8df47606dc4f4b75f78c5cdd98e27dfe_JaffaCakes118
Size

200KB
MD5

8df47606dc4f4b75f78c5cdd98e27dfe
SHA1

f70f709f9812e8ba1b18f674e9f1498142e86d40
SHA256

70632987fb9ea8499089d538c050f00c1416d8f5c9828fb89a2762b89c8c5fd4
SHA512

e3c9f26ea3f96fdda163f39bf9351f9e04f675dc3fba5b124627b6c545e1eef776e2d652ae269b6dc5abeb02bfb6fac365d2eefefff0575a9ebf1eab6bb00ed8
SSDEEP

3072:eyBmImFL2VUJx1T4MxJ881zRn2PZL13to7bm3vwPQMtysxTzgynDk8Cwie27V9Np:eyBmIJVMoMTRR2pttyQsJgynI8xsmu1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8df47606dc4f4b75f78c5cdd98e27dfe_JaffaCakes118

Files

8df47606dc4f4b75f78c5cdd98e27dfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dc5b872453e7f12c3159dfe6e0dd577

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
ord1

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 44KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE