93ed6de480708b19a7c5ffda1900a656_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93ed6de480708b19a7c5ffda1900a656_JaffaCakes118
Size

144KB
MD5

93ed6de480708b19a7c5ffda1900a656
SHA1

b22355f9bc503c525e512d1d1564ec601c007aaf
SHA256

0ce5cb71d5895d833c521a44e027794940f5ffef10a77a9002105996f877c0fb
SHA512

7b011cc57e77039e37a075fd2d1b3d3e424302f208eedee5b31e8c385fadcbf14f0f5760f6c7b69ede8d0b8988f48d7062fd9830b748fb7fe4b3d605be5948a3
SSDEEP

3072:+2qQtMnWXueDvXP+83piemMR8z0rG8hhqxM2S/n+qWNgE+:VqDnWXukXPBUMR9tgm2dqWNgn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93ed6de480708b19a7c5ffda1900a656_JaffaCakes118

Files

93ed6de480708b19a7c5ffda1900a656_JaffaCakes118
.exe windows:4 windows x86 arch:x86

715a2444e3b3cf0569041617948aa710

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
Sleep
WriteFile
TlsSetValue
DeleteCriticalSection

advapi32

RegQueryValueExA

oleaut32

SafeArrayPtrOfIndex
SysFreeString

wininet

InternetReadFile

Sections

.text
Size: 19KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE