a03bd139f0064c59dc4c0640f25f564e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a03bd139f0064c59dc4c0640f25f564e_JaffaCakes118
Size

326KB
MD5

a03bd139f0064c59dc4c0640f25f564e
SHA1

eb6f4e880991218244e63a5499f98f40083b6d19
SHA256

575fb7a9e758c9633abc8c2473ebde2aba4f7b6a6a7268f76f06ebf0153ed77f
SHA512

c8c7f73ac66b8af51a31b802e185f53722e8914b16ab9bfb84c6fb667a9dded954f5107c7aea30b13d74d7bd8d20618de6cf1ecd984241f937b90382c9ef6a74
SSDEEP

6144:yAiD8nbBwPpWrZt+dW6rka4VDWYf5o4UpUWdrc3NNN5YCQyv2vNZJ:TQ8nbNrZMg6rR4PVUtSYfv9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a03bd139f0064c59dc4c0640f25f564e_JaffaCakes118

Files

a03bd139f0064c59dc4c0640f25f564e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b21349150ed0317b6ae526441512b666

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

oleaut32

SysFreeString

advapi32

RegQueryValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

Sections

.text
Size: 19KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE