a59136f165e9eefbb1de807af1f450ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59136f165e9eefbb1de807af1f450ae_JaffaCakes118
Size

2.2MB
MD5

a59136f165e9eefbb1de807af1f450ae
SHA1

8b92f565621fe0e08f2592f5f0b9bc309196b3ac
SHA256

11392a25e02024401eda8f9e86dc015bf712ac463918919d7b10bf4809e0fc37
SHA512

246226afc25049f9c9c373868e0ba3aeb6fa8281b6a10408d56fc651adb66d981f114fc8ff1ebd46324323ca4ddbe44b0040088bb6acf8197fc9b59ff825df20
SSDEEP

49152:UCIXqkDNVSDOqmJSVn8BXW14R2D1Bw2MDMSgiNL6r+6CdJCZR81Tu7a3rIj+OAKn:UCumK9JSVnB4R2D1Bw2MAbiNmr+6MJCZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a59136f165e9eefbb1de807af1f450ae_JaffaCakes118

Files

a59136f165e9eefbb1de807af1f450ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0cbdfe015ebfa86b9a17799b076d195

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegCloseKey

comctl32

ImageList_Add

gdi32

SaveDC

ole32

OleDraw

oleaut32

VariantCopy

urlmon

URLDownloadToFileA

version

VerQueryValueA

Sections

.text
Size: 47KB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE