aa2f0d6e454703027e8225ae72093691_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2f0d6e454703027e8225ae72093691_JaffaCakes118
Size

70KB
MD5

aa2f0d6e454703027e8225ae72093691
SHA1

7c5a6758a0d9635c2077821841bb684d2fc66073
SHA256

a2b11bc84f66cb4f1c795612b1b028e1ce424a260120312af422593f065248eb
SHA512

131ee33e9c9e871641e009f97089dc53d45d78ceb2a4387ae2002a146a45e843f22234962ee9d6e9d92721935e240eb092af862ff904bff88e5c241f62b4575a
SSDEEP

1536:jKUv2tzLRF8mBYJT5s8+lBNtp5XXzkRkqDUqu+97:OUvUzL/7YJNts/n5XX4RkW7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2f0d6e454703027e8225ae72093691_JaffaCakes118

Files

aa2f0d6e454703027e8225ae72093691_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1242db25a2776743c9913cd04677f0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 22KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE